Edit tour

Windows Analysis Report
https://www.harbour-plaza.com/group/en/staff-offer

Overview

General Information

Sample URL:	https://www.harbour-plaza.com/group/en/staff-offer
Analysis ID:	1545071
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6156 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2168,i,1629603563974126045,9633521198816050405,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.harbour-plaza.com/group/en/staff-offer" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-MYEVWDEELX&gtm=45je4as0v879548136z8849071394za200zb849071394&_p=1730256450161&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&cid=1773833745.1730256460&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1730256464&sct=1&seg=0&dl=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&dt=CK%20Group%20Staff%20Offer&en=page_view&_fv=1&_ss=1&tfd=22792 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.harbour-plaza.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.harbour-plaza.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_240.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.keys)
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-patterns).
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)
Source: chromecache_240.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero)
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-tolength).
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/).
Source: chromecache_221.2.dr	String found in binary or memory: http://firmstudio.com/
Source: chromecache_221.2.dr	String found in binary or memory: http://google.com/ads/remarketingsetup
Source: chromecache_190.2.dr, chromecache_272.2.dr, chromecache_222.2.dr, chromecache_205.2.dr, chromecache_206.2.dr, chromecache_165.2.dr, chromecache_214.2.dr, chromecache_239.2.dr, chromecache_262.2.dr, chromecache_226.2.dr, chromecache_255.2.dr, chromecache_242.2.dr, chromecache_263.2.dr, chromecache_186.2.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_231.2.dr	String found in binary or memory: http://stackoverflow.com/questions/16092114/background-size-differs-in-internet-explorer)
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_164.2.dr, chromecache_181.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-regexp.prototype.tostring
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
Source: chromecache_159.2.dr, chromecache_221.2.dr, chromecache_168.2.dr	String found in binary or memory: http://www.omniture.com
Source: chromecache_157.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_221.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Source: chromecache_211.2.dr, chromecache_197.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://api.jquery.com/on/#event-names
Source: chromecache_142.2.dr, chromecache_204.2.dr	String found in binary or memory: https://b.triptease.io
Source: chromecache_147.2.dr, chromecache_140.2.dr	String found in binary or memory: https://b.triptease.io/application.js
Source: chromecache_221.2.dr	String found in binary or memory: https://be.synxis.com/?currency=HKD&locale=en-US&chain=
Source: chromecache_203.2.dr, chromecache_220.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=156034
Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_232.2.dr, chromecache_145.2.dr, chromecache_160.2.dr, chromecache_274.2.dr, chromecache_175.2.dr, chromecache_157.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_147.2.dr, chromecache_140.2.dr	String found in binary or memory: https://chat.guest-experience.triptease.io/chat.js?apiKey=$
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: chromecache_221.2.dr	String found in binary or memory: https://d.turn.com/r/dft/id/L21rdC8xMDk4L3BpZC84Njc2MzQ5OC90LzA?ns
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://d1otoma47x30pg.cloudfront.net/img/webflow-badge-text.6faa6a38cd.svg
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon.f67cd735e3.svg
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/FocusEvent/relatedTarget
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/is
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-mPCLQ7A.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AUi-qJCY.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_FQft1dw.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_158.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://forum.webflow.com/t/dropdown-menus-not-working-on-site/87140
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://gist.github.com/cvrebert/68659d0333a578d75372
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://github.com/gre/bezier-easing
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://github.com/webflow/webflow/issues/24921)
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://github.com/zenparsing/es-observable
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_175.2.dr	String found in binary or memory: https://google.com
Source: chromecache_175.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_221.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/945566240/?value=0&guid=ON&
Source: chromecache_243.2.dr, chromecache_267.2.dr	String found in binary or memory: https://map.baidu.com/?latlng=
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://mathiasbynens.be/notes/javascript-unicode).
Source: chromecache_221.2.dr	String found in binary or memory: https://onboard.triptease.io/bootstrap.js?integrationId=01HCHBD1QV58CBNE1A01G34VDG
Source: chromecache_140.2.dr	String found in binary or memory: https://onboard.triptease.io/integrations/$
Source: chromecache_157.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_232.2.dr, chromecache_145.2.dr, chromecache_160.2.dr, chromecache_274.2.dr, chromecache_175.2.dr, chromecache_157.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://raw.github.com/danro/easing-js/master/LICENSE
Source: chromecache_203.2.dr, chromecache_220.2.dr	String found in binary or memory: https://services.google.com/sitestats/
Source: chromecache_147.2.dr, chromecache_140.2.dr	String found in binary or memory: https://static-meta.triptease.io/client/main.js
Source: chromecache_147.2.dr, chromecache_140.2.dr	String found in binary or memory: https://static.paidsearch.triptease.io/index.js?v=1
Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_145.2.dr, chromecache_157.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_197.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_211.2.dr, chromecache_197.2.dr, chromecache_203.2.dr, chromecache_220.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_147.2.dr, chromecache_140.2.dr	String found in binary or memory: https://targeted-messages.triptease.io/static/bootstrap-message-engine.js
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype-
Source: chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.includes
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.indexof
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.create
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.defineproperties
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.defineproperty
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.getownpropertynames
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.keys
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-requireobjectcoercible
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-tointeger
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-tolength
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toprimitive
Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_232.2.dr, chromecache_145.2.dr, chromecache_160.2.dr, chromecache_274.2.dr, chromecache_175.2.dr, chromecache_157.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_221.2.dr	String found in binary or memory: https://tt.mbww.com/tt-34df2d15ee336296547593d47aa1f39f653dcb7b76215dacccd0488e14f579e6.js
Source: chromecache_164.2.dr, chromecache_181.2.dr	String found in binary or memory: https://use.typekit.net
Source: chromecache_207.2.dr, chromecache_240.2.dr	String found in binary or memory: https://webflow.com?utm_campaign=brandjs
Source: chromecache_218.2.dr, chromecache_199.2.dr	String found in binary or memory: https://wowjs.uk
Source: chromecache_274.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_211.2.dr, chromecache_197.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_211.2.dr, chromecache_197.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_211.2.dr, chromecache_197.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_157.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_211.2.dr, chromecache_197.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_172.2.dr, chromecache_180.2.dr, chromecache_152.2.dr, chromecache_271.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/945566240/?random
Source: chromecache_175.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_221.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion.js
Source: chromecache_157.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_232.2.dr, chromecache_160.2.dr, chromecache_274.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_203.2.dr, chromecache_220.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_211.2.dr, chromecache_197.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_221.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-GEMX71Y2CB
Source: chromecache_221.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_221.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NP3VTCP
Source: chromecache_232.2.dr, chromecache_160.2.dr, chromecache_274.2.dr, chromecache_175.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbour-plaza.com/group/en/#brand-harbour-grand
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbour-plaza.com/group/en/#brand-harbour-plaza
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbour-plaza.com/group/en/#brand-hotel-alexandra
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbour-plaza.com/group/en/#brand-rambler-hotels
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbour-plaza.com/group/en/goinggreen
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbour-plaza.com/group/en/health-safety/
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbour-plaza.com/group/en/product-eco-responsibility/
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbourgrand.com/hongkong/en/staff-offer/
Source: chromecache_221.2.dr	String found in binary or memory: https://www.harbourgrand.com/kowloon/en/staff-offer/
Source: chromecache_221.2.dr	String found in binary or memory: https://www.hotelalexandrahk.com/hotelalexandra/en/staff-offer/
Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_145.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_221.2.dr	String found in binary or memory: https://www.ramblerhotels.com/garden/en/staff-offer/
Source: chromecache_221.2.dr	String found in binary or memory: https://www.ramblerhotels.com/oasis/en/staff-offer/
Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_145.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50127 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50129 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50128 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50130 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.7:50131 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@19/215@62/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2168,i,1629603563974126045,9633521198816050405,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.harbour-plaza.com/group/en/staff-offer"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2168,i,1629603563974126045,9633521198816050405,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.harbour-plaza.com/group/en/staff-offer	0%	Virustotal		Browse

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
analytics-alv.google.com	0%	Virustotal	Browse
harbourplazahotel.122.2o7.net	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://ns.attribution.com/ads/1.0/	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
harbourplazahotel.122.2o7.net	63.140.62.17	true	false	0%, Virustotal, Browse	unknown
analytics-alv.google.com	216.239.32.181	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.185.98	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false		unknown
www.google.com	142.250.184.196	true	false		unknown
td.doubleclick.net	142.250.185.66	true	false		unknown
d-ams1.turn.com	46.228.164.13	true	false		unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false		unknown
Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com	18.166.199.244	true	false		unknown
stats.g.doubleclick.net	74.125.133.156	true	false		unknown
targeted-messages.triptease.io	unknown	unknown	false		unknown
onboard.triptease.io	unknown	unknown	false		unknown
d.turn.com	unknown	unknown	false		unknown
www.harbour-plaza.com	unknown	unknown	false		unknown
messages.guest-experience.triptease.io	unknown	unknown	false		unknown
api.triptease.io	unknown	unknown	false		unknown
analytics.google.com	unknown	unknown	false		unknown
b.triptease.io	unknown	unknown	false		unknown
tt.mbww.com	unknown	unknown	false		unknown
static-meta.triptease.io	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
https://www.harbour-plaza.com/js/handlebars.min.js?v=393c8f9fe4ab64db6b154b322a4d9d02af8a8824ca36e0356d867f16fd817aeb7333c0a7eaea55ccbe8cd43ca5e01f0e4f9ff84507f737b6489e4498d284bf77	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HALEX.png	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HPRC.png	false	unknown
https://www.harbour-plaza.com/group/files/page/737/RGH.jpg	false	unknown
https://www.harbour-plaza.com/css/animate.min.css?v=7474c793f5bb931c0f6f5c31c07022ae2f2be5e9010bbe0c74b9d393af881b97368d9c800b912d717ada0cd0d89c6acd070d18fcbcf5220504b6cce0cd612d94	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HGHK.jpg	false	unknown
https://www.harbour-plaza.com/images/weather-icon/60.png	false	unknown
https://www.harbour-plaza.com/js/moment.min.js?v=a935d120cc992056fc89071f8d75823bcf8ce536dcdfc422e56cdd3ce6191c8959a730471b72f76f2f3804104e8911a211beca2ad00e02ce6a61d52266240d35	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HPNP05.png	false	unknown
https://www.harbour-plaza.com/css/harbour-plaza.css?v=ca0584777c36ab01fbd8b2ca9a8482995cae36ae64feca37d732da937fcea17d5dbdc09b6b68905c6ef3eb20ce7cb6c1dfb3a6b582802f6b2103624e668e04c1	false	unknown
https://www.harbour-plaza.com/css/components.css?v=d37a2ecfeceecad909e00348ab25fd11d55302909d6209359930dbbeb11e665f635573c8bf863b22e8a32243b188017a74b9e6fa24ba6dcf2e94be876e6d774c	false	unknown
https://www.harbour-plaza.com/group/files/hotel_brands/4/bdd61253-01cf-4857-a56e-2d89bad0f4e6.png	false	unknown
https://www.harbour-plaza.com/group/files/hotel_brands/3/e559066b-4a46-47a9-9864-4e24bb8f4e04.png	false	unknown
https://www.harbour-plaza.com/group/files/page/737/RAM.png	false	unknown
https://harbourplazahotel.122.2o7.net/b/ss/hphplaza-corporate,hphglobal-test/1/H.21/s88884942141825?AQB=1&ndh=1&t=29/9/2024%2022%3A47%3A30%202%20240&ce=UTF-8&ns=harbourplazahotel&pageName=group%3Aen%3Astaff-offer&g=https%3A//www.harbour-plaza.com/group/en/staff-offer&cc=HKD&events=event4&c12=Wednesday&v17=Wednesday&v21=group&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1	false	unknown
https://www.harbour-plaza.com/group/en/staff-offer	false	unknown
https://www.harbour-plaza.com/group/files/website/9/5e0d1617-e33e-4602-9a72-77c72342a239.png	false	unknown
https://www.harbour-plaza.com/group/files/page/737/KLNH.jpg	false	unknown
https://www.harbour-plaza.com/js/wow.min.js?v=7e966998cbb05b3e9e28b04dc5f79a54c99e2fc905386d6c00fac819afd60ef061c3f8a3853ff065b40ee77c16f9d1d01f7d6f673133dd491be8c48bbfec8e2e	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HALEX.jpg	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HGKLN.jpg	false	unknown
https://www.harbour-plaza.com/js/s_code.js	false	unknown
https://www.harbour-plaza.com/group/files/hotel_brands/2/31d91a76-9bd7-4e36-b5a8-21bb59ce4410.png	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HPME9.jpg	false	unknown
https://d.turn.com/r/dft/id/L21rdC8xMDk4L3BpZC84Njc2MzQ5OC90LzA	false	unknown
https://www.harbour-plaza.com/group/files/page/737/HPMS10.jpg	false	unknown
https://www.harbour-plaza.com/js/jquery-ui.min.js?v=599c75ac88aa53fcb8e8dfe27171ea2eba050829efcd7cf248866311a7839cb9153b3fb83c48a8d003276742257e159601dacedae0845f63cf23b64b6d82167a	false	unknown
https://www.harbour-plaza.com/css/normalize.css?v=6db607ad2bdb9d3c78515094fcc56a567f4a4036139c47bbfe143c63769d4445d9147837fe9aa41fdebeac49979830cf9be295a3b9a3206c679db36c01d12eee	false	unknown
https://www.harbour-plaza.com/group/files/page/737/ROH.jpg	false	unknown
https://www.harbour-plaza.com/images/calendar_w.svg	false	unknown
https://www.harbour-plaza.com/js/jquery-3.5.1.min.js?v=5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b	false	unknown
https://www.harbour-plaza.com/group/files/page/737/KHFH9.jpg	false	unknown
https://www.harbour-plaza.com/css/styles.css?v=df42682342af4b30687beb0bc1c68f96cd780f89414a036ed8c17dbe031fcd8004946c5ccea0f2b36ccd7bfdd4bacea3edb59cda81b4afdedfdbeeb3fdb91ab9	false	unknown
https://www.harbour-plaza.com/js/common.js?v=700f9591d6d25a13f73a115a64b7a34ee9feac0930587d78fa1080bd6562ef34245aac4c416539f236a81806e907f71efd552f733ab661065f0a5c44c411eb68	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-object.getownpropertynames	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://forum.webflow.com/t/dropdown-menus-not-working-on-site/87140	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_179.2.dr, chromecache_198.2.dr, chromecache_145.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://github.com/gre/bezier-easing	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://www.harbour-plaza.com/group/en/product-eco-responsibility/	chromecache_221.2.dr	false		unknown
http://underscorejs.org	chromecache_207.2.dr, chromecache_240.2.dr	false	URL Reputation: safe	unknown
http://ecma-international.org/ecma-262/7.0/#sec-patterns).	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://www.harbour-plaza.com/group/en/#brand-rambler-hotels	chromecache_221.2.dr	false		unknown
https://map.baidu.com/?latlng=	chromecache_243.2.dr, chromecache_267.2.dr	false		unknown
https://www.harbour-plaza.com/group/en/goinggreen	chromecache_221.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_211.2.dr, chromecache_197.2.dr	false	URL Reputation: safe	unknown
https://raw.github.com/danro/easing-js/master/LICENSE	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-array.prototype.includes	chromecache_240.2.dr	false		unknown
http://firmstudio.com/	chromecache_221.2.dr	false		unknown
https://www.google.com	chromecache_157.2.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_179.2.dr, chromecache_198.2.dr, chromecache_145.2.dr, chromecache_157.2.dr	false		unknown
http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-toprimitive	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
http://google.com/ads/remarketingsetup	chromecache_221.2.dr	false		unknown
https://wowjs.uk	chromecache_218.2.dr, chromecache_199.2.dr	false		unknown
http://ns.attribution.com/ads/1.0/	chromecache_190.2.dr, chromecache_272.2.dr, chromecache_222.2.dr, chromecache_205.2.dr, chromecache_206.2.dr, chromecache_165.2.dr, chromecache_214.2.dr, chromecache_239.2.dr, chromecache_262.2.dr, chromecache_226.2.dr, chromecache_255.2.dr, chromecache_242.2.dr, chromecache_263.2.dr, chromecache_186.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_197.2.dr	false	URL Reputation: safe	unknown
https://tt.mbww.com/tt-34df2d15ee336296547593d47aa1f39f653dcb7b76215dacccd0488e14f579e6.js	chromecache_221.2.dr	false		unknown
http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/).	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-object.keys	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://d.turn.com/r/dft/id/L21rdC8xMDk4L3BpZC84Njc2MzQ5OC90LzA?ns	chromecache_221.2.dr	false		unknown
https://be.synxis.com/?currency=HKD&locale=en-US&chain=	chromecache_221.2.dr	false		unknown
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon.f67cd735e3.svg	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://b.triptease.io/application.js	chromecache_147.2.dr, chromecache_140.2.dr	false		unknown
https://www.harbour-plaza.com/group/en/#brand-hotel-alexandra	chromecache_221.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-object.defineproperty	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-requireobjectcoercible	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-object.prototype.propertyisenumerable	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://www.harbourgrand.com/kowloon/en/staff-offer/	chromecache_221.2.dr	false		unknown
https://d1otoma47x30pg.cloudfront.net/img/webflow-badge-text.6faa6a38cd.svg	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://www.ramblerhotels.com/garden/en/staff-offer/	chromecache_221.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_179.2.dr, chromecache_198.2.dr, chromecache_232.2.dr, chromecache_145.2.dr, chromecache_160.2.dr, chromecache_274.2.dr, chromecache_175.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
https://github.com/webflow/webflow/issues/24921)	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://bugs.webkit.org/show_bug.cgi?id=156034	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://static-meta.triptease.io/client/main.js	chromecache_147.2.dr, chromecache_140.2.dr	false		unknown
https://www.google.%/ads/ga-audiences	chromecache_211.2.dr, chromecache_197.2.dr	false		unknown
http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://www.hotelalexandrahk.com/hotelalexandra/en/staff-offer/	chromecache_221.2.dr	false		unknown
https://mathiasbynens.be/notes/javascript-unicode).	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
http://www.omniture.com	chromecache_159.2.dr, chromecache_221.2.dr, chromecache_168.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/FocusEvent/relatedTarget	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://use.typekit.net	chromecache_164.2.dr, chromecache_181.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-object.defineproperties	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
http://ecma-international.org/ecma-262/7.0/#sec-object.keys)	chromecache_240.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptor	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://onboard.triptease.io/bootstrap.js?integrationId=01HCHBD1QV58CBNE1A01G34VDG	chromecache_221.2.dr	false		unknown
https://www.google.com/pagead/1p-user-list/945566240/?random	chromecache_172.2.dr, chromecache_180.2.dr, chromecache_152.2.dr, chromecache_271.2.dr	false		unknown
https://github.com/zenparsing/es-observable	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
http://ecma-international.org/ecma-262/7.0/#sec-tolength).	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://b.triptease.io	chromecache_142.2.dr, chromecache_204.2.dr	false		unknown
https://tc39.github.io/ecma262/#sec-tointeger	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://webflow.com?utm_campaign=brandjs	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://github.com/bkwld/tram	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://static.paidsearch.triptease.io/index.js?v=1	chromecache_147.2.dr, chromecache_140.2.dr	false		unknown
https://api.jquery.com/on/#event-names	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown
https://www.harbour-plaza.com/group/en/#brand-harbour-plaza	chromecache_221.2.dr	false		unknown
https://www.ramblerhotels.com/oasis/en/staff-offer/	chromecache_221.2.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_164.2.dr, chromecache_181.2.dr	false		unknown
https://gist.github.com/cvrebert/68659d0333a578d75372	chromecache_207.2.dr, chromecache_240.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.133.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
63.140.62.27	unknown	United States	15224	OMNITUREUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
18.166.199.244	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.185.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
63.140.62.17	harbourplazahotel.122.2o7.net	United States	15224	OMNITUREUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.167.161.134	unknown	United States	16509	AMAZON-02US	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545071
Start date and time:	2024-10-30 03:46:28 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.harbour-plaza.com/group/en/staff-offer
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@19/215@62/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.186.78, 74.125.133.84, 34.104.35.123, 142.250.186.42, 172.217.16.194, 142.250.186.138, 142.250.186.66, 172.217.18.10, 142.250.185.234, 142.250.185.170, 216.58.212.170, 172.217.23.106, 142.250.185.202, 216.58.206.42, 216.58.206.74, 142.250.186.74, 142.250.181.234, 142.250.184.234, 142.250.185.106, 142.250.186.170, 142.250.185.138, 142.250.185.74, 142.250.185.163, 4.175.87.197, 142.250.185.232, 104.21.89.205, 172.67.164.226, 199.232.210.172, 172.217.16.200, 52.165.164.15, 142.250.184.232, 142.250.74.206, 93.184.221.240, 13.85.23.206, 151.101.1.182, 151.101.65.182, 151.101.129.182, 151.101.193.182, 151.101.1.62, 151.101.65.62, 151.101.129.62, 151.101.193.62, 151.101.2.133, 151.101.66.133, 151.101.130.133, 151.101.194.133, 142.250.184.227
Excluded domains from analysis (whitelisted): targeted-messages.triptease.io.cdn.cloudflare.net, www.googleadservices.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, time.windows.com, wu.azureedge.net, clients2.google.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, api.triptease.io.cdn.cloudflare.net, prod.q.ssl.global.fastly.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, d.sni.global.fastly.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, onboard.triptease.io.cdn.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	999
Entropy (8bit):	4.610626978506493
Encrypted:	false
SSDEEP:	12:Y6vdhvrogqPm0dXM5wiB7uslmXm5V/YCwww+Fxj7iLQgr1gCj+Z+aMqm8nbh1gdY:Y65qKTMsTvwh+FR7ot1gm0dl1Pm5Y
MD5:	90C302C08D2CFBB1CCEECAAE3624A2AA
SHA1:	0ABB6A41443B161F312208639632EEB5479C1193
SHA-256:	AEA979438CF3C3C88A99B8848A3EFEFE8767034B966397279D4E7058B1FC37D9
SHA-512:	A28234CF14D854D9D9CBF70976CA1D6AC864AD1588BCE730E1784E66682FE9C53F72F0F5F9FA338B4025235C98DF414F153D8A12258F4238EE1349158BAAAF35
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/applications?integrationId=01HCHBD1QV58CBNE1A01G34VDG&clientKey=01HCEXY419T8Y32C0RX4CXEKV0&includeDisabled=true
Preview:	{"applications":[{"name":"Chat","url":"https://chat.guest-experience.triptease.io/chat.js?apiKey=${apiKey}","type":"script","enabled":false},{"name":"CrossOriginTracking","url":"https://onboard.triptease.io/integrations/${onboard_version}/cross-origin-tracking.js","type":"script","enabled":false},{"name":"Express","type":"other","enabled":false},{"name":"Messages","url":"https://targeted-messages.triptease.io/static/bootstrap-message-engine.js","type":"script","enabled":true},{"name":"Meta","url":"https://static-meta.triptease.io/client/main.js","type":"script","enabled":true},{"name":"PaidSearch","url":"https://static.paidsearch.triptease.io/index.js?v=1","type":"script","enabled":false},{"name":"Parity","type":"other","enabled":true},{"name":"Retargeting","url":"https://b.triptease.io/application.js","type":"script","enabled":true},{"name":"SynxisPriceMatcher","url":"https://onboard.triptease.io/integrations/${onboard_version}/synxis-price-match.js","type":"script","enabled":true}]}

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Windows), datetime=2024:02:21 16:48:52], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	53478
Entropy (8bit):	7.77219004894883
Encrypted:	false
SSDEEP:	1536:olxx8jPzERjTORvPSba2YMfa8G0V/Qcjtr:YxaXmCKb5YMy859Qep
MD5:	813AFA482439DFD1F22DB111113DC952
SHA1:	8F01E2B9FC7BE6538992559E0D5D0EA1DC76CCEC
SHA-256:	CFA3A8A007360E5122A6CE49077450EDF45BE141C6DD495743FEBD00C0960F49
SHA-512:	12A03AF1AC4467C01BCC22D2D52299524945314A35B4C96018A4935BCF69D2739A3C5F2FA06FB88363D05AE64CFE109F4B31E616DE8154991195E410F71611DF
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HGHK.jpg
Preview:	......JFIF.....,.,......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 25.4 (Windows)..2024:02:21 16:48:52..........................@........................................... ...........(.(.....................0...................H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......T....!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..79b=.. .A.t"....Gs..&.Q..\G..%\.+...#..h..U.B..I.T.` ..+

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3139), with no line terminators
Category:	downloaded
Size (bytes):	3139
Entropy (8bit):	5.082029099056065
Encrypted:	false
SSDEEP:	96:KMH2zO6oaj2Vgh8d1qq0JDUyX6cE1dtrG1adE2WWIf+V:KMWfKvqTUxdGI+0x
MD5:	FA7C7CD917D05919B395A1323D44D361
SHA1:	D016686D26327491C2400E4245ABAD301C615C1D
SHA-256:	7C8974CBE4D808E25EFB0339C434E4EB77A45C4F59C49B301E78795CEBB93C04
SHA-512:	3040B6E977BF8CE90599A795584D5CE8699C62876E840841A8160B6CEA8A43AF24792B40D7F44D8041047963A52BBA1B628811B3E4447943BDB2287EFEF34D8B
Malicious:	false
Reputation:	low
URL:	https://b.triptease.io/application.js
Preview:	function ttRetargeting(){var s=window&&window.document\|\|document,o=window.BEE_SERVER_URL\|\|"https://b.triptease.io",t=window.BEE_WINDOW_LOCATION_URL\|\|window.location.href,a=!!function(e){if(t)return(e=t.match(new RegExp(e+"=([^&]*)")))&&e[1];return}("tt_rt"),c="",d=[],p=[];function u(e,t,r){var i;s.getElementById(t)\|\|((i=s.createElement(e)).setAttribute("id",t),i.setAttribute("src",r),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("style","display: none"),"iframe"===e&&(i.setAttribute("title","blank"),i.setAttribute("aria-hidden","true")),s.body.appendChild(i))}function g(t,e){(e=e\|\|p).forEach(function(e){e.postMessage(t,o)})}function I(t){0<d.filter(function(e){return JSON.stringify(e)===JSON.stringify(t)}).length\|\|(d.push(t),g(t))}function f(e,t,r){var i,n,s,a=window.localStorage.getItem("tt_bw_id"),c=e.payload,r={currency:c.currency\|\|r.currency,reference:c.reference\|\|r.reservationId,price:c.price\|\|r.totalPrice,checkin:c.checkin,checkout:c.checkout,basePrice:c

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1792
Entropy (8bit):	5.136138426066855
Encrypted:	false
SSDEEP:	48:Yl/TFs7/C0au/NcN/CuRz/jLE1eBY/Q/M7/jKqH/rho/IAU/P+b/7y:Oh2CsNmTRL09sMDjKqfuaPu7y
MD5:	3A7DB23207BC1E81D23E70314AB3C8E4
SHA1:	0B447B83F7137D473E8246A76E734B7288A6231B
SHA-256:	EC8C405CD28699474BDAF45052FF7349CF346815EA1AD5ACA8172E86D251CB44
SHA-512:	BF074CE2CE40CEECE722742F197C71EF669D1B4CDA0E62092FCFF26FD92251BC4BEC37AF5937DA1163D44DDE7C0F721A8D594F625FDACCA5F68B547D64DCD996
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/hotels?integrationId=01HCHBD1QV58CBNE1A01G34VDG
Preview:	{"hotels":[{"hotelName":"Harbour Grand Hong Kong","apiKey":"ac2600b797b240dc9287f3237bd9401d","identifiers":["Harbour Grand Hong Kong","76632"]},{"hotelName":"Harbour Grand Kowloon","apiKey":"776435b7b63749258038bdd3389d8279","identifiers":["Harbour Grand Kowloon","kowloon","76633"]},{"hotelName":"Harbour Plaza 8 Degrees","apiKey":"5b59fcf1be704fd08c5ec2db4cce27d1","identifiers":["Harbour Plaza 8 Degrees","8degrees","synxis:21619/76634","76634"]},{"hotelName":"Harbour Plaza Metropolis","apiKey":"270c138549f646b790ebb14ef4a46793","identifiers":["Harbour Plaza Metropolis","metropolis","76636"]},{"hotelName":"Harbour Plaza Metropolitan","apiKey":"d66574aca3b04f91b002dda2c34fbb72","identifiers":["Harbour Plaza Metropolitan Shanghai","metropolitan-shanghai","38215"]},{"hotelName":"Harbour Plaza North Point","apiKey":"2b5d59780bc248fb809987ad568806f0","identifiers":["Harbour Plaza North Point","northpoint","76637"]},{"hotelName":"Harbour Plaza Resort City","apiKey":"38a2bee28c1e4d5db57c7e91b

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	33965
Entropy (8bit):	7.907864409510554
Encrypted:	false
SSDEEP:	768:aYXIbvJ91vYM4w9g2EZXSp0S4ef+dlnfma8VGSJCQj2nLI:aay1wM39ghSp0dNIgUNynk
MD5:	32CA0691EF608EA2D4227A506448BBEB
SHA1:	AE201428641AB7948A68EE847552AB629EF5FEAD
SHA-256:	D1418E79042917516A3D37358D7D3BBA8E9E18FBEE988EC33B2D62CB6186170B
SHA-512:	3A06F7A0BA9649DF6A8DD40AF0032143DB81B23764BC7FD931EF3F94823F754C47066F3D048E7D86EA80DAB43755084110C08E6839CF0F3C596572DF6225B332
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HPMS10.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..I."..~..8.8.B.......M.Q../Q.Z.[.<. q....2M.~{.$WE..t...V.@..A...qH..'.Z..@...?..-.....:...J............1...]HG.~.&...9...q...9.....>.=.U...(.r..=j^-.v..Ee.....\H..#...#.......9..WS`./^x...O.....=X.s.....Kn../.@.....*.....z.>...}].b.O..D..-W#..w....}..pjx...6@..5...p..3..p9.....nO.n.I5.............z=.....im.#+....5:[eG...+\D....S.K.'.......s.Qt_.3....

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	299435
Entropy (8bit):	5.575141485665999
Encrypted:	false
SSDEEP:	6144:DFGbgBD2ojk2639cM8Gp//2lAtu9BW24n19:DqcD2ojdAAEX
MD5:	B9272785759E7D057A8D21ADE3F0F7FA
SHA1:	D131F87CE59922836C191A90C97C398F39F6189B
SHA-256:	3DAF810E58439E17F317F049F1DE3D1DE0EE87A9D52FDEB65608CAEEF1F67F5A
SHA-512:	D3620E88B6EB9D91B1F2F14BF1A60CAB7778DADF7E43C9301207C21A2795E49967D77CE6A677C6E6660457875300DF48F182605242595EB2B5AD965904F31CCB
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16661
Entropy (8bit):	6.935994832435693
Encrypted:	false
SSDEEP:	192:3knjxDL8ZuwE3FV1JK2KBMZFSfOVjgjBNuPnQhOeM8xL7qiW3oKSBo+JPyAFBAat:0niZuwE3JcawBdbeXmCOVCt7Po
MD5:	95F8218EF9945B9BF8017D8B6C554DA1
SHA1:	A80CF3D25E21111E6897A4A6F60AC06F33600ECB
SHA-256:	2B778DC08436DC9C91B0F56B5F8C34D0B2F24B3CDF2EA76DE050E2474A1DEC5D
SHA-512:	128055D7ECD1B9E097F57EBED24A40BABA3BBB2185FA5A49A363D2DED84FE3D99BA8F729425CE36D9D22C87824F469E62E833C2E646A81F55BAE2D9AA9A8D69C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d.....N.8_....sRGB.........gAMA......a.....pHYs..........+....'.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" dc:format="image/png" xmp:CreatorTool="Adobe Illustrator CC 22.1 (Macintosh)" xmp:CreateDate="2018-05-04T19:03:53+08:00" xmp:

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	999
Entropy (8bit):	4.610626978506493
Encrypted:	false
SSDEEP:	12:Y6vdhvrogqPm0dXM5wiB7uslmXm5V/YCwww+Fxj7iLQgr1gCj+Z+aMqm8nbh1gdY:Y65qKTMsTvwh+FR7ot1gm0dl1Pm5Y
MD5:	90C302C08D2CFBB1CCEECAAE3624A2AA
SHA1:	0ABB6A41443B161F312208639632EEB5479C1193
SHA-256:	AEA979438CF3C3C88A99B8848A3EFEFE8767034B966397279D4E7058B1FC37D9
SHA-512:	A28234CF14D854D9D9CBF70976CA1D6AC864AD1588BCE730E1784E66682FE9C53F72F0F5F9FA338B4025235C98DF414F153D8A12258F4238EE1349158BAAAF35
Malicious:	false
Reputation:	low
Preview:	{"applications":[{"name":"Chat","url":"https://chat.guest-experience.triptease.io/chat.js?apiKey=${apiKey}","type":"script","enabled":false},{"name":"CrossOriginTracking","url":"https://onboard.triptease.io/integrations/${onboard_version}/cross-origin-tracking.js","type":"script","enabled":false},{"name":"Express","type":"other","enabled":false},{"name":"Messages","url":"https://targeted-messages.triptease.io/static/bootstrap-message-engine.js","type":"script","enabled":true},{"name":"Meta","url":"https://static-meta.triptease.io/client/main.js","type":"script","enabled":true},{"name":"PaidSearch","url":"https://static.paidsearch.triptease.io/index.js?v=1","type":"script","enabled":false},{"name":"Parity","type":"other","enabled":true},{"name":"Retargeting","url":"https://b.triptease.io/application.js","type":"script","enabled":true},{"name":"SynxisPriceMatcher","url":"https://onboard.triptease.io/integrations/${onboard_version}/synxis-price-match.js","type":"script","enabled":true}]}

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1792
Entropy (8bit):	5.136138426066855
Encrypted:	false
SSDEEP:	48:Yl/TFs7/C0au/NcN/CuRz/jLE1eBY/Q/M7/jKqH/rho/IAU/P+b/7y:Oh2CsNmTRL09sMDjKqfuaPu7y
MD5:	3A7DB23207BC1E81D23E70314AB3C8E4
SHA1:	0B447B83F7137D473E8246A76E734B7288A6231B
SHA-256:	EC8C405CD28699474BDAF45052FF7349CF346815EA1AD5ACA8172E86D251CB44
SHA-512:	BF074CE2CE40CEECE722742F197C71EF669D1B4CDA0E62092FCFF26FD92251BC4BEC37AF5937DA1163D44DDE7C0F721A8D594F625FDACCA5F68B547D64DCD996
Malicious:	false
Reputation:	low
Preview:	{"hotels":[{"hotelName":"Harbour Grand Hong Kong","apiKey":"ac2600b797b240dc9287f3237bd9401d","identifiers":["Harbour Grand Hong Kong","76632"]},{"hotelName":"Harbour Grand Kowloon","apiKey":"776435b7b63749258038bdd3389d8279","identifiers":["Harbour Grand Kowloon","kowloon","76633"]},{"hotelName":"Harbour Plaza 8 Degrees","apiKey":"5b59fcf1be704fd08c5ec2db4cce27d1","identifiers":["Harbour Plaza 8 Degrees","8degrees","synxis:21619/76634","76634"]},{"hotelName":"Harbour Plaza Metropolis","apiKey":"270c138549f646b790ebb14ef4a46793","identifiers":["Harbour Plaza Metropolis","metropolis","76636"]},{"hotelName":"Harbour Plaza Metropolitan","apiKey":"d66574aca3b04f91b002dda2c34fbb72","identifiers":["Harbour Plaza Metropolitan Shanghai","metropolitan-shanghai","38215"]},{"hotelName":"Harbour Plaza North Point","apiKey":"2b5d59780bc248fb809987ad568806f0","identifiers":["Harbour Plaza North Point","northpoint","76637"]},{"hotelName":"Harbour Plaza Resort City","apiKey":"38a2bee28c1e4d5db57c7e91b

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70139
Entropy (8bit):	5.425031104629737
Encrypted:	false
SSDEEP:	1536:kRxbKag1MhfaT8halRzm7yIuohygVSvwu6y4w7PU3jjxHHsO:kXb243yIuohy0ewu6y4w7PU3jjxHHsO
MD5:	A2653206EA3403669E7912FA42C842C2
SHA1:	7CA4BC0EC7C44BBF919B48317C165ECA7EBF3F0E
SHA-256:	131F833F198F7F7DE271EAC621E88A53BA12003F2A9541752A6FAB20CF7291B9
SHA-512:	DAD23A79CD76D1A1D5EC8970DFB9057A4224173079AEFB913E6046B6E4CF4BA017BF286203CCA4F09791DAF40D82CFCE6B4A1E1165AEE242D8881A7292B747BE
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/kernel/v8513.120578/kernel.js?
Preview:	(()=>{var Vi=Object.create;var Ae=Object.defineProperty,zi=Object.defineProperties,jr=Object.getOwnPropertyDescriptor,$i=Object.getOwnPropertyDescriptors,Ji=Object.getOwnPropertyNames,qr=Object.getOwnPropertySymbols,Zi=Object.getPrototypeOf,Lr=Object.prototype.hasOwnProperty,Qi=Object.prototype.propertyIsEnumerable;var Hr=(r,e,t)=>e in r?Ae(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t,Ne=(r,e)=>{for(var t in e\|\|(e={}))Lr.call(e,t)&&Hr(r,t,e[t]);if(qr)for(var t of qr(e))Qi.call(e,t)&&Hr(r,t,e[t]);return r},Tt=(r,e)=>zi(r,$i(e)),Yi=r=>Ae(r,"__esModule",{value:!0});var f=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports);var Xi=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let n of Ji(e))!Lr.call(r,n)&&n!=="default"&&Ae(r,n,{get:()=>e[n],enumerable:!(t=jr(e,n))\|\|t.enumerable});return r},T=r=>Xi(Yi(Ae(r!=null?Vi(Zi(r)):{},"default",r&&r.__esModule&&"default"in r?{get:()=>r.default,enumerable:!0}:{value:r,enumerable:!0})),r),P=(r,e,t,n)=>{for(var i=n>1

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	107764
Entropy (8bit):	5.342181332194727
Encrypted:	false
SSDEEP:	1536:35oq09/TEszfw3a/C3g7AJKtw6+KdztUvcu1sSGzwF6wl6NyLWot6otFO4iUzu9M:JoD5TEszf3/H7ExNmmzu9pT++G
MD5:	00A0463A5819562BF10192458847896B
SHA1:	5E52ADE0E54EF84B85D807BF4BD9CE97FC895A78
SHA-256:	A711D20BAA06A759989FF862C9C4812A7B25C111BABD9056116EEFC25CAAC567
SHA-512:	7404608181FE022C5DE302C264141461A1A70800FB1C0B8EB6266CE4DC76077CE2FCF35F2C4E346B0330C960788A06AEC39AC9D70BD501C4F94805265A5AAE40
Malicious:	false
Reputation:	low
Preview:	(()=>{var Fo=Object.create;var jt=Object.defineProperty;var Ks=Object.getOwnPropertyDescriptor;var No=Object.getOwnPropertyNames;var Lo=Object.getPrototypeOf,$o=Object.prototype.hasOwnProperty;var Uo=r=>jt(r,"__esModule",{value:!0}),a=(r,e)=>jt(r,"name",{value:e,configurable:!0});var d=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports);var Bo=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let n of No(e))!$o.call(r,n)&&n!=="default"&&jt(r,n,{get:()=>e[n],enumerable:!(t=Ks(e,n))\|\|t.enumerable});return r},F=r=>Bo(Uo(jt(r!=null?Fo(Lo(r)):{},"default",r&&r.__esModule&&"default"in r?{get:()=>r.default,enumerable:!0}:{value:r,enumerable:!0})),r),Ft=(r,e,t,n)=>{for(var s=n>1?void 0:n?Ks(e,t):e,i=r.length-1,o;i>=0;i--)(o=r[i])&&(s=(n?o(e,t,s):o(s))\|\|s);return n&&s&&jt(e,t,s),s};var ce=(r,e,t)=>new Promise((n,s)=>{var i=u=>{try{c(t.next(u))}catch(l){s(l)}},o=u=>{try{c(t.throw(u))}catch(l){s(l)}},c=u=>u.done?n(u.value):Promise.resolve(u.value).then(i,o);c((t=t.apply(r,e)).next(

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 76, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5182
Entropy (8bit):	7.867409060514386
Encrypted:	false
SSDEEP:	96:264291tB7PVaHQNrOF8ZDRxRP7VnhaH+epa8wNUej2xps4pW4c:JbhOQNfDRxRBh3e4zUeyxpsyJc
MD5:	D4708B8742AF2753877A8977B5AA0F6A
SHA1:	331CB4B01D44B29DDF0E22F8020122A372CCB3CE
SHA-256:	EA14D3CC6434E4B67464111AE8CEB0B48FC79B1C6E2BE1070FB071D2F0DCDB6E
SHA-512:	2E6EBF86DC918DF8D3BABEE8CD50B9CDFAE9080BC0E464BF40B2E9A1F77A0877689D680CBEE4F8B480EF90BCBB7983085057E3DA8583EC76E992BFDCC63DE7A0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......L......m~.....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:66265912F3D611EA93298346D5121DD3" xmpMM:DocumentID="xmp.did:66265913F3D611EA93298346D5121DD3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:66265910F3D611EA93298346D5121DD3" stRef:documentID="xmp.did:66265911F3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...4....IDATx..].....m.A#.8..Q ..$................Q@D....5.<F.#f..E6QQA......YdSBT...Aq...%.:....n.z.......n..^.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4544), with no line terminators
Category:	downloaded
Size (bytes):	4544
Entropy (8bit):	5.782546090911189
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUlfkSO6+:1DY0hf1bT47OIqWb1sfkSP+
MD5:	3EF90B60AEFC32C45B5BC26C6BA386C2
SHA1:	275B0643B20CC80E13E88FC8C00F42E7302F154B
SHA-256:	C16BF620D2126E0237422691C64E6D801BD960C00A6EC2B66BA869C98F3B589F
SHA-512:	E3B18C6CBF52B7616DC699B987EEBF87DE4B610934BCAD2C2EE022D8E53F759FBBC7D47997FC740DB4CC08A155504D871CB9B6508B7F63E26E75D4E285D5F1C4
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/945566240/?random=1730256450177&cv=9&fst=1730256450177&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&tiba=CK%20Group%20Staff%20Offer&hn=www.googleadservices.com&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17072, version 1.0
Category:	downloaded
Size (bytes):	17072
Entropy (8bit):	7.989353907758723
Encrypted:	false
SSDEEP:	384:f3GwyH0sglp8a+PvDNJaxsHKg6gWGOiaEpnXL6tJBXGTGRO:vGWrgPvDNDHKTgWGOiaUXkVmaO
MD5:	A049F4C6BCB907E3D451BDB388C8E86F
SHA1:	F6261C1401A8A0F31AE74FB9EF7AB6DFEC3EF1B6
SHA-256:	B19EFE906C9B0345DB45525ED83C76031644E39329A36D39BADF5275BCE363C2
SHA-512:	7D26EE3315BF2964C55803D317C6021224CA1C298BB68AB96D6D4BD1870DEFBADC1A722C726C81556B376737B52E38C9BAED6D5A1FF1B2C5A25E3B634D2CBB24
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2
Preview:	wOF2......B...........BP..........................v.p.`..`..D....s.....$.....B..6.$..v. ..0..E.r.....w...........n.J"..#......-1..?%i...b.J..C...Eg"...`X.....`(...tL....2.9.!.:C.........\|eP..,.p.s..w.=..JL.c.[4..k.V\U6.V.v......v.-m..>..):....4.A.}.-..m#.r...j....3{.....~E.............=.%...........}A8....R.D.A0...(..R...NQ.q...gM....n...w..]nW....kW1l.<D.68.....=.....4..0....T.2....8......L........b......:.z.. .. ...l..O9..E..f.Y...F..q.A`.g.g.......O....=..3..b9$.....^...L...R..T.Tx..bU2....3.8........M...5.......f.>.......F.=.^.DF.N]..W...%=.......s'/..-..-..".U.f....$M...%N.P....l.w..q.W..Y.....Q)?..........&...>x..B}EW.r..+..2KX-..!...........;.6?..(xU.o.6....?...%!..~......Q.c.B.\.nA...SjZ..N].".}{.u..N...K.3.Y....H._+.a'..& ....cy...~...b.0..!...d].2...M:.p.....(..xw...p...:...t..zf.6.:5.....W.....=.t./E..p.=...`P.....{n...Y..VG.`h}..;.....2.}..a....x.'.............V._...#^.pb.;....{.'..Q....mz..<..8.3.W.-.,1.5,jpf......i<?.....

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1192
Entropy (8bit):	6.610876678136866
Encrypted:	false
SSDEEP:	24:31hzVWwjx82lY2T3WVnqSyJ3VIixGyzFKrka+TJ:FJwNn2qqJ3WELzF6hiJ
MD5:	A702E27AD90E36FA8844A2421E264471
SHA1:	25BDB7B5691613277FDA5DE8D60035EAA23A079E
SHA-256:	0EC2795129F20BFB3EB398520E1BB16C4CDF5F26ACC1ABC86E348FA13313BCAC
SHA-512:	B5E15048BF140AB2575867CC24851B585312386825318044546FE8D2774D596175DCA7B4EC6F238EF523BFBFB9C902C8E58756281AEA99E750ECD263148ADC11
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/images/heaeder_lang.png
Preview:	.PNG........IHDR.............;.J....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:13E5D4D6EF3211EAAEE6853A279006E5" xmpMM:DocumentID="xmp.did:13E5D4D7EF3211EAAEE6853A279006E5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:13E5D4D4EF3211EAAEE6853A279006E5" stRef:documentID="xmp.did:13E5D4D5EF3211EAAEE6853A279006E5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..=k.Q.E'"..T6..RDH...{;!."...k....K.[...D...!......Y....:M......kI.X@]t..f....D..V..YW.1...

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8127
Entropy (8bit):	5.028102886091003
Encrypted:	false
SSDEEP:	96:MjpceHNdGRj3jGkRUQzMOw3gDYLyUTZWhflwofyD/K6EfFi4jM/F:MvtdkjlW9dIwofyD/K6IcbF
MD5:	519121FA4CDF6782A4C1C412564605E2
SHA1:	DCD9297E0C5C4A9A8BA8FB02A7D93CF85984CCD3
SHA-256:	25194B73EC31C5FA1E315CD30FD7428F4075D725740663AEA2E60D1DE61288CB
SHA-512:	6DB607AD2BDB9D3C78515094FCC56A567F4A4036139C47BBFE143C63769D4445D9147837FE9AA41FDEBEAC49979830CF9BE295A3B9A3206C679DB36C01D12EEE
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/css/normalize.css?v=6db607ad2bdb9d3c78515094fcc56a567f4a4036139c47bbfe143c63769d4445d9147837fe9aa41fdebeac49979830cf9be295a3b9a3206c679db36c01d12eee
Preview:	/! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /../*.. 1. Set default font family to sans-serif... * 2. Prevent iOS and IE text size adjust after device orientation change,.. * without disabling user zoom... /..html {.. font-family: sans-serif;.. / 1 /.. -ms-text-size-adjust: 100%;.. / 2 /.. -webkit-text-size-adjust: 100%;.. / 2 /..}../.. Remove default margin... /..body {.. margin: 0;..}../ HTML5 display definitions.. ========================================================================== /../.. Correct `block` display not defined for any HTML5 element in IE 8/9... * Correct `block` display not defined for `details` or `summary` in IE 10/11.. * and Firefox... * Correct `block` display not defined for `main` in IE 11... /..article,..aside,..details,..figcaption,..figure,..footer,..header,..hgroup,..main,..menu,..nav,..section,..summary {.. display: block;..}../.. 1. Correct `inline-block` display not defined in IE 8/

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	299435
Entropy (8bit):	5.575113104133044
Encrypted:	false
SSDEEP:	6144:DFGbgBD2oak2639cM8Gp//2lAtu9BW24n19:DqcD2oadAAEX
MD5:	CB50BF30C44A57D3CB288DB10B6BE3AB
SHA1:	704E430A577056F9E89A545D0B95A58E727FAAA7
SHA-256:	0C690996DF4231AE9292925857F4D48CC9384799C9F1C133EE37335F9160415D
SHA-512:	1D8D82B228BBD60F7A54B8A11B84039A113FBE5794E231127C406EDDDB0C5CFE1D8009AE9E29B3234800814709037BD4733DB5A9FFE593F29B33A7565BC9092A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GEMX71Y2CB
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7824
Entropy (8bit):	5.308082286096113
Encrypted:	false
SSDEEP:	192:437Q337RliJ3lilkF3kBpii3piUTio3TiT71O7su6JMnI2uSkQM:43g31ARAl2gMuMUm8mTkg
MD5:	49E98AD376DF74925E917C8B9A7A41F1
SHA1:	3283F8CAAEF8725E131FC5475B30C308A3EF6B4E
SHA-256:	CAB013A057AC951FF3181D435B41DA0C32736EAAEA08F1E2B1E9A8C1F96F6BFA
SHA-512:	F970068C5B209941090356FF2775EF5ADAC47A9F8FEBEBC0708AFC84BC42BDFB58DA6F9C1F1C23B4CBB499D04689FF6D5F3579F744BB5116B64824633B451C8A
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lato:100,100italic,300,300italic,400,400italic,700,700italic,900,900italic"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-mPCLQ7A.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2) format('woff2');. unicode-range: U+01

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (360), with CRLF line terminators
Category:	dropped
Size (bytes):	40671
Entropy (8bit):	5.532538492892281
Encrypted:	false
SSDEEP:	768:5B7tZPBx+jGnwvz0P4Jo1p2zPq4mhRgP360ROV9j:D7HPBsjG80UoGjqDhmpROV9j
MD5:	74D4375BB685494F11526A6651615BB3
SHA1:	FB4F90BF63C71157D92170DE3691459259550070
SHA-256:	13C4EE61E05CEB2C92CDF2731B5B5BFAEF18CC6766237517AC87C6C633B94AF2
SHA-512:	1CC2516D568CF896E8A2C1DE262EEEF1324108E8860724D6AA68B994B935769180356ADCC6C6442F1007E2761238385D2B36BF87AB435FAFC48FDC63B3F03346
Malicious:	false
Reputation:	low
Preview:	/* SiteCatalyst code version: H.21...Copyright 1996-2010 Adobe, Inc. All Rights Reserved..More info available at http://www.omniture.com /....function getQuerystring(key, default_)..{.. if (default_==null) default_="";.. key = key.replace(/[\[]/,"\\\[").replace(/[\]]/,"\\\]");.. var regex = new RegExp("[\\?&]"+key+"=([^&#])");.. var qs = regex.exec(window.location.href);.. if(qs == null).. return default_;.. else.. return qs[1];..}....function getHotelCode() {...var site_url = document.URL;...var split_url;.. var domain_name;.. var site_cd, site_cd1;.. var hotel_cd;.. var hotel_id;.. var hotel_number;.. var account_code="";.. split_url = site_url.split("/");.. domain_name = split_url[2];.. site_cd1 = split_url[3];.. site_cd = split_url[4];.. .. if (document.getElementById("Hotel_id")) hotel_id = document.getElementById("Hotel_id").value;.. if (document.getElementById("hotel_id")) hotel_id = document.getElementById("hotel_id").value;.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	249331
Entropy (8bit):	5.5487832179252266
Encrypted:	false
SSDEEP:	3072:LawiztGbETratoJy035CptDY8/I8+yr/OUYhcDmKD0C8Gp/mXG:SGbg+tolM/GUTx0C8Gp/mW
MD5:	AD310898BD973CEF7F95973A6B44C45B
SHA1:	A5DB1C6C40F28B7A5CCB9F735CFF36F5ACFF26E5
SHA-256:	6E0F3EDB516283BB91541FEA1A7FA9FC877C2004F1372A020807B7E65AFCF196
SHA-512:	CB7D2C873F48D184C09E8D4CABE5F77F145037ECB0DE3DB846F9F85504ECC6382D2C192D6AC17D58CEFD25598D673521DFCC87E055A9258F2E7487966E30150F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-945566240&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14291), with no line terminators
Category:	dropped
Size (bytes):	14291
Entropy (8bit):	5.241778974353157
Encrypted:	false
SSDEEP:	384:NzCqT2K0Er+a/mcQ7HsTgMJCf2DqMPtGMw9X:pCqiKh/LTgT4Q
MD5:	C2915CE5776E1A7028453277991D6B13
SHA1:	3F9D31E43CAF89CDE83FA69C7C46D881C1F84D68
SHA-256:	AA2BB53F6EBC7B34633EE64AAD6E4287323F71E4A37DA3ACA923DA3B1B603F3D
SHA-512:	80A23F7EED3A679C8F6CAA6550859013C2EE2859D50F2BA67E321D568A5C62EBA125156AB46B0788800D6C0050D9EA3236AC054CE8679F44A7C915BD36CD634E
Malicious:	false
Reputation:	low
Preview:	!function(){var a=void 0,b=function(a,b){function c(a){return a?d(a):void 0}function d(a){for(var b in c.prototype)a[b]=c.prototype[b];return a}return a.exports=b,a.exports=c,c.prototype.on=function(a,b){return this._callbacks=this._callbacks\|\|{},(this._callbacks[a]=this._callbacks[a]\|\|[]).push(b),this},c.prototype.once=function(a,b){function c(){d.off(a,c),b.apply(this,arguments)}var d=this;return this._callbacks=this._callbacks\|\|{},b._off=c,this.on(a,c),this},c.prototype.off=c.prototype.removeListener=c.prototype.removeAllListeners=function(a,b){if(this._callbacks=this._callbacks\|\|{},0==arguments.length)return this._callbacks={},this;var c=this._callbacks[a];if(!c)return this;if(1==arguments.length)return delete this._callbacks[a],this;var d=index(c,b._off\|\|b);return~d&&c.splice(d,1),this},c.prototype.emit=function(a){this._callbacks=this._callbacks\|\|{};var b=[].slice.call(arguments,1),c=this._callbacks[a];if(c){c=c.slice(0);for(var d=0,e=c.length;e>d;++d)c[d].apply(this,b)}return th

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	70139
Entropy (8bit):	5.425031104629737
Encrypted:	false
SSDEEP:	1536:kRxbKag1MhfaT8halRzm7yIuohygVSvwu6y4w7PU3jjxHHsO:kXb243yIuohy0ewu6y4w7PU3jjxHHsO
MD5:	A2653206EA3403669E7912FA42C842C2
SHA1:	7CA4BC0EC7C44BBF919B48317C165ECA7EBF3F0E
SHA-256:	131F833F198F7F7DE271EAC621E88A53BA12003F2A9541752A6FAB20CF7291B9
SHA-512:	DAD23A79CD76D1A1D5EC8970DFB9057A4224173079AEFB913E6046B6E4CF4BA017BF286203CCA4F09791DAF40D82CFCE6B4A1E1165AEE242D8881A7292B747BE
Malicious:	false
Reputation:	low
Preview:	(()=>{var Vi=Object.create;var Ae=Object.defineProperty,zi=Object.defineProperties,jr=Object.getOwnPropertyDescriptor,$i=Object.getOwnPropertyDescriptors,Ji=Object.getOwnPropertyNames,qr=Object.getOwnPropertySymbols,Zi=Object.getPrototypeOf,Lr=Object.prototype.hasOwnProperty,Qi=Object.prototype.propertyIsEnumerable;var Hr=(r,e,t)=>e in r?Ae(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t,Ne=(r,e)=>{for(var t in e\|\|(e={}))Lr.call(e,t)&&Hr(r,t,e[t]);if(qr)for(var t of qr(e))Qi.call(e,t)&&Hr(r,t,e[t]);return r},Tt=(r,e)=>zi(r,$i(e)),Yi=r=>Ae(r,"__esModule",{value:!0});var f=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports);var Xi=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let n of Ji(e))!Lr.call(r,n)&&n!=="default"&&Ae(r,n,{get:()=>e[n],enumerable:!(t=jr(e,n))\|\|t.enumerable});return r},T=r=>Xi(Yi(Ae(r!=null?Vi(Zi(r)):{},"default",r&&r.__esModule&&"default"in r?{get:()=>r.default,enumerable:!0}:{value:r,enumerable:!0})),r),P=(r,e,t,n)=>{for(var i=n>1

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	149
Entropy (8bit):	5.33562051868713
Encrypted:	false
SSDEEP:	3:YMlUxm/hqmnWOA+BENU5c+QmV2ALA/4tcnzDHGKK4I4:YMvPWQQIcTAL84tcnPrVI4
MD5:	72DB47A0A520B1179BC4674B7256A67E
SHA1:	AF2E4C05A5E46B34A01CD8E9680A0E33FD818BA5
SHA-256:	737ECFD3161FC7CBB20B97F41FEF62F04F38884AFE6A4B8DEF703895AF68B929
SHA-512:	55344101539D96FD0ED37D66978A67BB2B470FD5FF8ABED7CBEC84372E010F17D89AF0750F6F4FDE6186C8453FA506E55BBA47C37D65B14ABCF356C05F215011
Malicious:	false
Reputation:	low
Preview:	{"integrationId":"01HCHBD1QV58CBNE1A01G34VDG","clientKey":"01HCEXY419T8Y32C0RX4CXEKV0","clientName":"HARBOURPLAZAHOTELSRESORTS","validationError":[]}

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2134)
Category:	dropped
Size (bytes):	13188
Entropy (8bit):	5.4223896155104025
Encrypted:	false
SSDEEP:	384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d
MD5:	7C96A5F11D9741541D5E3C42FF6380D7
SHA1:	D3FA2564C021CF730E58FFDDB138CF6B57ED126E
SHA-256:	81016AC6BE850B72DF5D4FAA0C3CEC8E2C1B0BA0045712144A6766ADFAD40BEE
SHA-512:	23C162A2E268951729B580E5035AD6CA9969CFCC5CE58A220817B912E76B38BE6C29C3CA7680CB4E8198863D95A72EA65BD06FF7189B5C8475E4C1CE501AEAB1
Malicious:	false
Reputation:	low
Preview:	/. Copyright 2016 Small Batch, Inc.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not. * use this file except in compliance with the License. You may obtain a copy of. * the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the. * License for the specific language governing permissions and limitations under. * the License.. /./ Web Font Loader v1.6.26 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.app

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 167, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	122913
Entropy (8bit):	7.989901785386632
Encrypted:	false
SSDEEP:	1536:xUTIiMyXcSYZfvbNhIuXBO8ixlOtjZChSqg/NPzRh62Y3AcI5DVcGQ+AXSOlPJzw:mIiM7BNXIJIjZxq0NjuwcwDmGsCVtX
MD5:	E2C5754B89EFCEEEEF2136921836FC00
SHA1:	628A5000DA6CD1A84B689CAEABE45149141B4004
SHA-256:	75C2E22CA007D72E4D0A25D05A6974CFD9D51405328F704607CC9C7AE95A7921
SHA-512:	8E79F8B837EA43705A583D1190449E00A8FB70239F55B67B87D377F85E168C10294EDF718FDFC7A33FD585C234D012A87E3545B35A7D92F4E680A25DE3CA50E9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@.........`..$....sRGB.........gAMA......a.....pHYs..........+.....;tEXtComment.xr:d:DAF9Y_bfYb0:2,j:1208509939341979441,t:24022103.......iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>..... - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-02-21</Attrib:Created>. <Attrib:ExtId>30abef82-ad30-4073-bd65-abe9a76d5ba8</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=4480, bps=0, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R, orientation=upper-left, width=6720], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	45723
Entropy (8bit):	7.468260231907668
Encrypted:	false
SSDEEP:	768:ZJz5zJ8TYyRRVdZuo8nuLp5AiirZbqdYohzZTG6AaVnS2kbim8vt4:Z1pJwD3oRnK52od9hPSDb/+q
MD5:	F1174A52BF24C6B8769AE24943036D34
SHA1:	DEA1EDA7896A3D66D07719C6329343E255AB304D
SHA-256:	9C5DC977EE7335569B0F21D30083BDE0B34734DEE377E8FDC0925C95D13EA4BB
SHA-512:	43B76E2C58A6B40BD265DE345E156CD0DCFEECB6B240999EDE720E709900391039E42E388ED703E9C5E40D3EEABC33030F90FDA0906490F500B54C262E916CAE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*...............@...............................................................................................................(...........1...........2...........i.............X......Canon.Canon EOS R..$....'..$....'.Adobe Photoshop CS5.1 Windows.2019:10:15 10:04:04.. ........................."...........'...........0...........2.................0231..............................................................................................................73..........73.........................@.................................................................................................1...........2...........4.........4.5.........J....................2018:07:29 06:22:36.2018:07:29 06:22:36....x..B@.i....B@..........................UU......UU....068022003208.............#....................EF16-35mm f/4L IS USM.0000000000...........................................(.........................................H.......H.........C..............

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fwww.harbour-plaza.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (360), with CRLF line terminators
Category:	downloaded
Size (bytes):	40671
Entropy (8bit):	5.532538492892281
Encrypted:	false
SSDEEP:	768:5B7tZPBx+jGnwvz0P4Jo1p2zPq4mhRgP360ROV9j:D7HPBsjG80UoGjqDhmpROV9j
MD5:	74D4375BB685494F11526A6651615BB3
SHA1:	FB4F90BF63C71157D92170DE3691459259550070
SHA-256:	13C4EE61E05CEB2C92CDF2731B5B5BFAEF18CC6766237517AC87C6C633B94AF2
SHA-512:	1CC2516D568CF896E8A2C1DE262EEEF1324108E8860724D6AA68B994B935769180356ADCC6C6442F1007E2761238385D2B36BF87AB435FAFC48FDC63B3F03346
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/s_code.js
Preview:	/* SiteCatalyst code version: H.21...Copyright 1996-2010 Adobe, Inc. All Rights Reserved..More info available at http://www.omniture.com /....function getQuerystring(key, default_)..{.. if (default_==null) default_="";.. key = key.replace(/[\[]/,"\\\[").replace(/[\]]/,"\\\]");.. var regex = new RegExp("[\\?&]"+key+"=([^&#])");.. var qs = regex.exec(window.location.href);.. if(qs == null).. return default_;.. else.. return qs[1];..}....function getHotelCode() {...var site_url = document.URL;...var split_url;.. var domain_name;.. var site_cd, site_cd1;.. var hotel_cd;.. var hotel_id;.. var hotel_number;.. var account_code="";.. split_url = site_url.split("/");.. domain_name = split_url[2];.. site_cd1 = split_url[3];.. site_cd = split_url[4];.. .. if (document.getElementById("Hotel_id")) hotel_id = document.getElementById("Hotel_id").value;.. if (document.getElementById("hotel_id")) hotel_id = document.getElementById("hotel_id").value;.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=4480, bps=0, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R, orientation=upper-left, width=6720], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	44367
Entropy (8bit):	7.527506062748917
Encrypted:	false
SSDEEP:	768:3NGiRGBLn3vLpWIyiiPdweAeWFFJkjsrN+NdQ8g8RoBFKscX:31GBT3VLQdMe0+AQfohO
MD5:	A18306CAE921E03F5FFE96462E63B8F2
SHA1:	B944E770F1332AC7489B980599D80CBC4F20C5E4
SHA-256:	43DB78D37843726FAD41AB0ECF63C0A45C39B3E04F3B6E0A1C0D51127EEDFBCA
SHA-512:	6D6E36F7B7B7DEB89E25817CF78805FB6E48C683F9BC6EBD9AA523261D4B07FE60B4AE4E9BCCCF06A5F78E1A1B7B32A6ED6A4D2772D1D1340BE7549725485C09
Malicious:	false
Reputation:	low
Preview:	......JFIF.............jExif..MM.*...............@...............................................................................................................(...........1...........2...........i.............X......Canon.Canon EOS R..$....'..$....'.Adobe Photoshop CS5.1 Windows.2019:10:02 17:14:52.. ........................."...........'...........0...........2.................0231..............................................................................................................61..........61..........................................................................................................................1...........2...........4.........4.5.........J....................2018:07:30 11:39:44.2018:07:30 11:39:44...+...B@.i....B@..........................UU......UU....068022003208.............#....................EF16-35mm f/4L IS USM.0000000000...........................................(.........................................H.......H.........C..............

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21508, version 1.0
Category:	downloaded
Size (bytes):	21508
Entropy (8bit):	7.9880543334499885
Encrypted:	false
SSDEEP:	384:KnDSSIRNb16PJLoYYwxgdAz0PDeKAkc3qDqlxmB5nb2ztGilBTS4NYy:KmSI/ZwLoe0yGqK5bzilBPd
MD5:	24B8A8ABBEC56AB127ADC36E35F49BB3
SHA1:	0906975D70856EF3DF1AE3D91DB5D29687981C3F
SHA-256:	A79B4C65B454A795FF3868156F54BE09AC8360B9FD3BA21431B5C48FD9B66AFA
SHA-512:	1B60C792D65E363D9B4F190EC897685086685940D823D527BC3F4406127F556377A02AC7E8853A82275B0606C579B014006D42BAEE59D7B3B16AA92A335A9078
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHh30AXC-q.woff2
Preview:	wOF2......T...........S...........................z.p.`..`..D....s.....,..X..6...L.6.$..h. ..&..p.r...9..v. "...k{o>.1.a..J..^...:R........."c&...z...+.E&.6L.@....d.(.XV....&9...&.C.....8...Mz...4.\...p.......z...M5.X.joZ..V...`^.\|..2.q.8..i..A.....h.+.BC.n...-r+..d.._7....Z%........0.aL.'].?.H...d..r..%+.\|y.,....x..K..z5R..Y......L.Y}R..........I..j....3.{..0 ..%.G`Y..B.....s6....n...CD4."..%..)....T..B.D.5.....r4.2.l9..3[.n.7.1......?.../[\V.z-.IWt...TB#4B#4B#4B#..HSs.$...,-.b2.m..s3..(..>.."H.e#..u{.Z...M.O.E.Q........fg.f..1.N..^..2i K...W.'&X a~.%T.Wo.L.e&._O.....U....~..^.:..q....L..<.px\....$C....].#(.k..g^.^.;..Z.5..WK....d...[.G.\|p..C#......Z.........1.......`D..r.7..~.\|.......>9@.x...]T.KNdt....{.......9...l@....km...6..;...~.&.............?... ..#.....VW.>.k^.l.3......;P4....A.m..FHNx..w.e..4.j.+.^.R.T.TJ.........<....w...P#W"...&...6[4..T.G.]..<.DH...Q......p.2.L..$..@.........o..).a.)W<8n...v..t..G,w..ag:%.T9cv.........

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	99538
Entropy (8bit):	5.37168153829237
Encrypted:	false
SSDEEP:	1536:eMBMZIYzswHdj10l4V8QTNytRfJcPZsClYDAeambRnTZF6pupbDBImdImjqBpRvi:pMyYzLH51CkyHfiZ3GamFzlDBgPRvjW
MD5:	40A3BD9C77B2FF3A924475417E168832
SHA1:	C2706D317FC33FF27C52FC60E4255A744AA74222
SHA-256:	D61057C8D6AA11E1FF87DBECE528028BE432EF00A4DD77F28717DF923F2E836A
SHA-512:	60E541D226457465132B799D7B8BDB9EF6544314D9694397F32915018937AA8753704A2B23A1BB33A7E20A976A68346E324C67070EF542C0779DB8B264C85B04
Malicious:	false
Reputation:	low
URL:	https://targeted-messages.triptease.io/static/bootstrap-message-engine.js
Preview:	(()=>{function e(e){return e&&e.__esModule?e.default:e}var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},i={},a={},r=t.parcelRequire8d74;null==r&&((r=function(e){if(e in i)return i[e].exports;if(e in a){var t=a[e];delete a[e];var r={id:e,exports:{}};return i[e]=r,t.call(r.exports,r,r.exports),r.exports}var s=new Error("Cannot find module '"+e+"'");throw s.code="MODULE_NOT_FOUND",s}).register=function(e,t){a[e]=t},t.parcelRequire8d74=r),r.register("lxtR3",(function(e,t){var i=r("2t0No");function a(){var e;try{e=t.storage.debug}catch(e){}return!e&&void 0!==i&&"env"in i&&(e=void 0),e}(t=e.exports=r("crKfB")).log=function(){return"object"==typeof console&&console.log&&Function.prototype.apply.call(console.log,console,arguments)},t.formatArgs=function(e){var i=this.useColors;if(e[0]=(i?"%c":"")+this.namespace+(i?" %c":" ")+e[0]+(i?"%c ":" ")+"+"+t.humanize(this.diff),!i)return;var a="color: "+

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4759), with no line terminators
Category:	dropped
Size (bytes):	4759
Entropy (8bit):	5.827653223813971
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUsfJuR3:1DY0hf1bT47OIqWb1FfJux
MD5:	FB821BE3CC97CF803D0E5D30D31D8A89
SHA1:	E882B4BA80263CAB73F7F6CCD9DE2E4BBD30FBC0
SHA-256:	0D9732E085E8DC840BC2B9B7F8E410F81AC5F0F6F3DB4C9FAC0E8699FC3DF335
SHA-512:	326F4E778486A63DD2DA21B3BD3A4F91A384C120ED0192FE2BB95EDCA273CD870DFC1BAE1B07A582DACE22F5716A5B27219E4EBC3BBBDA36D880F6ED54D5B37D
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58823)
Category:	dropped
Size (bytes):	58862
Entropy (8bit):	5.436868261653025
Encrypted:	false
SSDEEP:	768:wQzzGlTXaQRT5OeehGXgg99OmpuSv2Z7W2gXKkxK+6htrEFH76aAr:Hn6XHN5OeHh9Om5obKKkK+6D6HA
MD5:	5C158B940513C7DC2EBD901455E9B63D
SHA1:	F992A08C86F88B10ABD35FAE20D468EC52C824E6
SHA-256:	73DE4254959530E4D1D9BEC586379184F96B4953DACF9CD5E5E2BDD7BFECEEF7
SHA-512:	A935D120CC992056FC89071F8D75823BCF8CE536DCDFC422E56CDD3CE6191C8959A730471B72F76F2F3804104E8911A211BECA2AD00E02CE6A61D52266240D35
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.moment=t()}(this,function(){"use strict";var e,i;function f(){return e.apply(null,arguments)}function o(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function u(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function m(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function l(e){if(Object.getOwnPropertyNames)return 0===Object.getOwnPropertyNames(e).length;for(var t in e)if(m(e,t))return;return 1}function r(e){return void 0===e}function h(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function a(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function d(e,t){for(var n=[],s=0;s<e.length;++s)n.push(t(e[s],s));return n}function c(e,t){for(var n in t)m(t,n)&&(e[n]=t[n]);return m(t,"toString")&&(e.toString=t.toString),m(

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 259 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23082
Entropy (8bit):	7.352002231585734
Encrypted:	false
SSDEEP:	384:3On1filSE3mydBZo4TaBtnxmW7zCDtkhVuIBXJegtV84yx1l+e2:+1i3i4eHx77zCpkDuY5egtrYlF2
MD5:	4D90AC7A0E8E669EF2A84879845B40C7
SHA1:	01F2E3C1AC5E4375C646AD95BD3726941EE062C9
SHA-256:	47B0B96674ACC93E252B9E168C01398749594038490C9D464A1500AD714D9964
SHA-512:	0D36F1B91F237026CD32CE69405747A17865EAA1DAF134FB978EEEDA51E4152ECCD6F4011034193785821DF56F71A8C20B4802C089625C477179C3921356EFDF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......d......WU.....sRGB.........gAMA......a.....pHYs..........+....(.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" dc:format="image/png" xmp:CreatorTool="Adobe Illustrator CC 22.1 (Macintosh)" xmp:CreateDate="2018-05-04T19:04:32+08:00" xmp:

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4271)
Category:	dropped
Size (bytes):	302973
Entropy (8bit):	5.566112530997214
Encrypted:	false
SSDEEP:	3072:52wiztGbETCatoAy0B5CptDY8/I8+yr/OUYhcDmuD0C8Gp/srT+fRYG:oGbgxtowM/GUTd0C8Gp/sSd
MD5:	70F6F921F92D04322C494439E3172BD2
SHA1:	ECFE8401EDE2F3E779A6DF10B87839632618475A
SHA-256:	1B10ED8E5B2ACBC212BB2EB74141C9DF0EAD240F2378A3B5FB41167F17281A11
SHA-512:	0E1D1B2C8385FB61C20A92705F1F7F19BC1957CEFAA89FA2F695E2E00110989D223730594F74066F7D4734FA3A8BA02761679E23C319216E426F88EFEB29DAA5
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"10",. . "macros":[{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_fieldsToSet":["list",["map","fieldName","allowLinker","value","true"]],"vtp_useHashAutoLink":false,"vtp_autoLinkDomains":"harbour-plaza.com,be.synxis.com","vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-202272906-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLin

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 178 x 76, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4317
Entropy (8bit):	7.829265501983424
Encrypted:	false
SSDEEP:	96:+42YWpvEbnNsBEyV5OSmILL0lX90NxRz+H9jhi:+FsQESRLm9aZ+H7i
MD5:	6D9FE13078DE42F52E8F5E151EF7DF09
SHA1:	1D727457CED7C2CC0D35C4B76D5BEDDE8BE87947
SHA-256:	F0C3D338173507E2A9D18B09C02BD8F970D74142BBA7AFF23A060E86410424D0
SHA-512:	980FEF7A1D3A1C6FCFBBDDD758128C25B286C1A771CC3326D07B35A9D95BE06AF00808179C38C953C1F8F4475710DDC2099812D36025F7C58B9F73657513F414
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......L.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:41295479F3D611EA93298346D5121DD3" xmpMM:DocumentID="xmp.did:4129547AF3D611EA93298346D5121DD3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:41295477F3D611EA93298346D5121DD3" stRef:documentID="xmp.did:41295478F3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..u....NIDATx..]..UE...[1^.X.TRH....R.!.....f7"...E...ZR).@.......B.R.J.WAD^.!..)..T..s.......sxh..k.k..3..3....

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23736, version 1.0
Category:	downloaded
Size (bytes):	23736
Entropy (8bit):	7.992430272946195
Encrypted:	true
SSDEEP:	384:Z9auu097JkkosFVZcRch7P2tJ9zR+c+pvPXnPP0Xdgr0rr69944PdreomKBgULc:ZMuR9FkkJVZLh7etJLrCPXAjY9reOgGc
MD5:	E2CAD968CB158B719D38375C5B4C2855
SHA1:	F70E8C03147ACCC3B9006A285998CB6C04CC19D9
SHA-256:	D32335C2C5FD5DE9EE5F3D3B1FE4D9DDE14AAD16EDA570A35018B0FF1DC093D2
SHA-512:	2FC86781ACCB6245F22D02E5AF7847C7CA5CDCB06CA39432B5EA35F7426A31B2EEE885AC926286F4EBCBF2DCDF92AFEC577298C1D58BBF588401295AA33FFF53
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI3wi_Gwft.woff2
Preview:	wOF2......\...........\Y..........................<.p.`..D....e.....T.....B..6.$..v. ..>..E.K.G.%c.m......6<.!l.h..-..cNx.`.....yGE..L....~...I8.).C1.i.Ia..n..K.lB..l.;MQ.........]'.......`.0=+.....f".K...N&........EU.:.~/.~....T...H.^...M.gN4$.3I.%....J....e3bU.S......o.}...=.(...T..F.....4........92Fl...f...2`...Qc......X.......Qo.zo.q.zy=.CY...;3NK.....v.....dOIJ..=...MU..e.J......].......'U?.}if...)..Hm.2>....!.v.m.M.t..m..6k..Z.%0.....T.b..............^...S..Y.nr.w4.s...W...(..~.m".f........?.Tv.T....u.((.. y.&tDOW....W......Z..\|..\|.O....$\|\|...7..)%F....1.&z\|{.....OQ8.T.....P....:.3\|)9..n....t...".r......w?.....X. .P..7.B.m.s%...&....k-.;jj..9-(.O._.~i4...%.;l.<J.[.M....N..vhz.....X.#..b....J."..j....(P.......Ik....F.y..hk.............6h H..A..T"!....J.C.E.4.Ik.{.Igi.j.h.5.(=kB.LtIxY.w..avqz.Iv<..2g.R..../.+..I9.S.N....?Q#).......E;......... L.C4DK.,...J....K.!"s2.u.6..G.N.."V.1.<.fQ....*.M....\|..A-...+[.Y...../?C.w(..9....

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 259 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23082
Entropy (8bit):	7.352002231585734
Encrypted:	false
SSDEEP:	384:3On1filSE3mydBZo4TaBtnxmW7zCDtkhVuIBXJegtV84yx1l+e2:+1i3i4eHx77zCpkDuY5egtrYlF2
MD5:	4D90AC7A0E8E669EF2A84879845B40C7
SHA1:	01F2E3C1AC5E4375C646AD95BD3726941EE062C9
SHA-256:	47B0B96674ACC93E252B9E168C01398749594038490C9D464A1500AD714D9964
SHA-512:	0D36F1B91F237026CD32CE69405747A17865EAA1DAF134FB978EEEDA51E4152ECCD6F4011034193785821DF56F71A8C20B4802C089625C477179C3921356EFDF
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/RAM.png
Preview:	.PNG........IHDR.......d......WU.....sRGB.........gAMA......a.....pHYs..........+....(.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" dc:format="image/png" xmp:CreatorTool="Adobe Illustrator CC 22.1 (Macintosh)" xmp:CreateDate="2018-05-04T19:04:32+08:00" xmp:

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16608)
Category:	dropped
Size (bytes):	350298
Entropy (8bit):	5.602131184547535
Encrypted:	false
SSDEEP:	6144:e4KbGbgBu2okk2639cM8Gp/R2NAtu9BW24nOC:nKkcu2oklAAEZ
MD5:	84EBF39259BDA78EBC89F3DD42E764C1
SHA1:	23AB69636C5FB895FC8C7C9C8C6E4C5991FF92D0
SHA-256:	F474A984E8DB879F164593D38BDA3330876C30D6E74474A6F1B726FA6BBC7806
SHA-512:	305329A422F1651B059D0AFC70624F7F0BBDC187E1F8223CF1B515E5146C2E36B681A04496194C219458943142AFB9674C925FF7EF46EAC2B9E291138AAFDF41
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","be\\.synxis\\.com","harbour\\-plaza\\.com","harbourgrand\\.com","ramblerhotels\\.com","hotelalexandrahk\\.com"],"tag_id":108},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","be\\.synxis\\.com","harbour\\-plaza\\.com","harbourgrand\\.com","ramblerhotels\\.com","hotelalexandrahk\\.com"],"tag_id":110},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":111},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":112},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4562), with no line terminators
Category:	dropped
Size (bytes):	4562
Entropy (8bit):	5.798110732182305
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUlfkSOx+:1DY0hf1bT47OIqWb1sfkSE+
MD5:	5A8E2042CFCF1550D19B2B2597DB6E31
SHA1:	DEA28A7203061D5CEB43CD171C95BBFEB5C68FA9
SHA-256:	5BF4D58657499D219E30925D45BE7AE45A92A3BAEEE16683A078BF8508908822
SHA-512:	11FE3B4A6347FD833A9ACF7CCFA32DC77B5C5139BBE270311944D5B015CC8F69F5AD1A344F0CC6527029A5CDE9EDB723FCE75C37B75F331A5F1891B595677A1C
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2134)
Category:	downloaded
Size (bytes):	13188
Entropy (8bit):	5.4223896155104025
Encrypted:	false
SSDEEP:	384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d
MD5:	7C96A5F11D9741541D5E3C42FF6380D7
SHA1:	D3FA2564C021CF730E58FFDDB138CF6B57ED126E
SHA-256:	81016AC6BE850B72DF5D4FAA0C3CEC8E2C1B0BA0045712144A6766ADFAD40BEE
SHA-512:	23C162A2E268951729B580E5035AD6CA9969CFCC5CE58A220817B912E76B38BE6C29C3CA7680CB4E8198863D95A72EA65BD06FF7189B5C8475E4C1CE501AEAB1
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Preview:	/. Copyright 2016 Small Batch, Inc.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not. * use this file except in compliance with the License. You may obtain a copy of. * the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the. * License for the specific language governing permissions and limitations under. * the License.. /./ Web Font Loader v1.6.26 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.app

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7485), with no line terminators
Category:	downloaded
Size (bytes):	7485
Entropy (8bit):	5.209355127982681
Encrypted:	false
SSDEEP:	192:ps/L8CkULH6VYJv7kMNtu6Seekf31CvSAjY0XJ82GfD3t:pMgCkULHcYl7kAE6Seekf31CvbjJ8Zrd
MD5:	F7C6FE290AB8A2FE2C40D9E48E3C8A37
SHA1:	5A6E82F0AAF97567FBE8BEF07C14A70B7009D892
SHA-256:	44967AF7D7413422FF93EF8E795F138FFA16E64D705BF2FCDBB164145E7D651F
SHA-512:	F547EB1CB66F5CF78C3AFFEA9A96705A165230369E2AD58681C63C223BDE58F0C28AF447A009571912B89C2145480D310BB9D9D5A0D8D82574E4C1255E73CEDB
Malicious:	false
Reputation:	low
URL:	https://targeted-messages.triptease.io/static/storageIframe.html
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Triptease Storage</title><script type="module">function e(e,t){try{localStorage.setItem(e,t)}catch(e){}}function t(e){try{return localStorage.getItem(e)}catch(e){}}function a(e){try{return localStorage.removeItem(e)}catch(e){}}function o(){try{return localStorage.clear()}catch(e){}}let i;var n;let s;var r;let l;var c;let d;var _;let u;var p;let m;var g;let y;var v;let k;var f;let h;var C;let S;var b;let w;var R;let T;var E;let I;var A;let N;var P;let O;var D;let M;var U;let L;var B;let x;var W;let q;var F;let G,V;var z;let H;var K;let X;var Y;let Q;var Z;let j;var J;let $;var ee;let te;var ae;(n=i\|\|(i={})).countdown="countdown",n.crisis="crisis",n.emailCapture="email-capture",n.fullScreen="full-screen",n.inPage="in-page",n.notifications="notifications",n.nudge="nudge",n.priceCheck="price-check",n.saveTheSearch="save-the-search",n.undercut="undercut",n.inline="inline",n.previewAssist="preview-assist",(r=s\|\|(s={})).INFO="i

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32064), with CRLF line terminators
Category:	dropped
Size (bytes):	80285
Entropy (8bit):	5.557904945559755
Encrypted:	false
SSDEEP:	768:jY16Ge+9fSiMwUqOLi7pWoatdvOBoiWV/jo6+SrdvBUZ3I0muWptoC0MeEiA+vzT:jy6o9qcpWomaMVwSrrtmMiA+78Y
MD5:	8A3E902675FDE0E4AAADDB13D1DFC49F
SHA1:	A4195BE69256201A1455699E1A0FFE010B64C8DE
SHA-256:	36707C74DB8EFA918C31D30190167E11CFFE049F49915C06FC556C0A8EA8588C
SHA-512:	393C8F9FE4AB64DB6B154B322A4D9D02AF8A8824CA36E0356D867F16FD817AEB7333C0A7EAEA55CCBE8CD43CA5E01F0E4F9FF84507F737B6489E4498D284BF77
Malicious:	false
Reputation:	low
Preview:	/**!.... @license.. handlebars v4.7.6....Copyright (C) 2011-2019 by Yehuda Katz....Permission is hereby granted, free of charge, to any person obtaining a copy..of this software and associated documentation files (the "Software"), to deal..in the Software without restriction, including without limitation the rights..to use, copy, modify, merge, publish, distribute, sublicense, and/or sell..copies of the Software, and to permit persons to whom the Software is..furnished to do so, subject to the following conditions:....The above copyright notice and this permission notice shall be included in..all copies or substantial portions of the Software.....THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR..IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,..FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE..AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER..LIABILITY, WHETHER IN AN ACTION OF CONTRACT, T

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24408, version 1.0
Category:	downloaded
Size (bytes):	24408
Entropy (8bit):	7.9925104649213425
Encrypted:	true
SSDEEP:	384:lwfLHrvMt+iWkciwtprblXNenWbFrqBY34OlZDsnNBvlUg0/qxFul2sOgZl06t2b:6bjU6PflXNHFrZJLDsT+gpx59cS6t2b
MD5:	EFEE2D080D7BEBDD2E0AEB2E030813A0
SHA1:	F8D38F9F9584E48C2E469877EBD94232265585F1
SHA-256:	BCA1D88ADA544D9C80872D4DA27133FAB6D347361FA26E932B47EC9559088FD0
SHA-512:	16C55AD46A26E0AF340F2B8A89BD98C1CCAD5C976B434AAFA7D1D8CD5049B40A58C5350FA42029710C9DD8040E7CEA05E57979731B941086CA096239169F4F3C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2
Preview:	wOF2......_X..........^...........................H.p.`..D....e.....t..o..B..6.$..v. .....E.K...%.E.. >.t1.`......<........%r.y.%.@g..L..^.n..>j?.Ve...~.U............Im.-...3..S....).K.....l..m6.D.hv.;.'~%v.a.D>...Se...i..Z........O....gv.(.$.2IDT...2.q.`.6..i`..&...J.H...FcD..,...".[?.~...B.c...<T..<.r..s..D.....&c.@...i\.........[Z.h.....8.1............-.h.u......=.a.Y`..P....HP.r.....V2..D.xJu.....S.m..gr5/@v.>8.]......RW......z.A....am..z...(.4...i....&.Zd......u.{G3...H......[...$..o[.-.../]....d....Q....x..Q.o..Y,...8.i-...!..Fn]N.....D_..q...n..)&..).......x&.r:.D....d.M.m..6....M.V.....n.....h.l(?..8 d../.v.......>..ED$...B..e.T.Q.Jh.........=......'n..LH...UX.......JW..J..d...-Gp..ncuR.$\.&.......H.p..t.........lw9,.......?.\|g....{ed.C"e....f..OvPXE..i.t.K.x<x0!.cj........miy...kb.........jd.\{...E......n>.vj;...U.D.b..a4..\H.$........A.....*..vl..IH..!. J3\Nm............l.....?t..#CO.......^...\.......w...`'.....

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	149
Entropy (8bit):	5.33562051868713
Encrypted:	false
SSDEEP:	3:YMlUxm/hqmnWOA+BENU5c+QmV2ALA/4tcnzDHGKK4I4:YMvPWQQIcTAL84tcnPrVI4
MD5:	72DB47A0A520B1179BC4674B7256A67E
SHA1:	AF2E4C05A5E46B34A01CD8E9680A0E33FD818BA5
SHA-256:	737ECFD3161FC7CBB20B97F41FEF62F04F38884AFE6A4B8DEF703895AF68B929
SHA-512:	55344101539D96FD0ED37D66978A67BB2B470FD5FF8ABED7CBEC84372E010F17D89AF0750F6F4FDE6186C8453FA506E55BBA47C37D65B14ABCF356C05F215011
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/client?integrationId=01HCHBD1QV58CBNE1A01G34VDG
Preview:	{"integrationId":"01HCHBD1QV58CBNE1A01G34VDG","clientKey":"01HCEXY419T8Y32C0RX4CXEKV0","clientName":"HARBOURPLAZAHOTELSRESORTS","validationError":[]}

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	32499
Entropy (8bit):	7.942507096814788
Encrypted:	false
SSDEEP:	768:meo67NkMRrNqTMIX31B2VSwTz/SkoQby+em+CCQX:mevBkMtNU1OzZO+ex2X
MD5:	038A4850F303D22D40D70513A97286C3
SHA1:	807C185EEB16151482C45E2A66DF41E194FEEEB0
SHA-256:	CB82E6CAF510B90F7FCD30F5E5042B84DF02DBABEB38A8EB9F1D6E030541B0FD
SHA-512:	CBC5C6E1C38A983F9D987B8EC8B39437C1AE38CA3A4F3AE2408CC53D8C850802AFA4950FD978321AAC5D2490C1F02102410D5B168966966B5BB82C12B1433393
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HP8D9.jpg
Preview:	......JFIF.....`.`......Exif..MM.*.............................V...........^.(.......................i.........f.......`.......`..............0231....................0100.....................@........................http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">CK offer cover - 1</rdf:li>......</rdf:Alt>.....</dc:title>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:Attrib="http://ns.attribution.com/ads/1.0/">.....<Attrib:Ads>......<rdf:Seq>.......<rdf:li rdf:parseType="Resource">........<Attrib:Created>2024-09-12</Attrib:Created>........<Attrib:ExtId>1d09c9d9-ebef-4e03-b75e-ca5b0ce3206c</Attrib:ExtId>........<Attrib:FbId>525265914179580</Attrib:FbId>........<Attrib:TouchType>2</Attrib:TouchType>.......</rdf:li>......</rdf:Seq>.....</Attrib:Ads>

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22504, version 1.0
Category:	downloaded
Size (bytes):	22504
Entropy (8bit):	7.9897727403675995
Encrypted:	false
SSDEEP:	384:ZbL6k1TUlBxUp5VLlLJGv2VulERzgWuXlY9zehEsapJznPEUAAnUgf0n6iXatBbF:pLfTuYfVVJGv2VuIzgWAlYteh6nPEzAF
MD5:	1C6C65523675ABC6FCD78E804325BD77
SHA1:	898D9808304DC157F5DCB18CA169EC6E2B96B3D7
SHA-256:	08664859BAAB5ED98F0BF818ED77E38464FF1826DC6406D5ECBD651409AFBD92
SHA-512:	1505E8496C9BEE214C5F8815F8D88A31FFE2BAEB6FBA81A8228BD52220B9B2BB10464C1E1DBA11D6881583DFA478CDFB30A79CFA6F069C362FB65443FEB06918
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2
Preview:	wOF2......W..........W...........................z.p.`..D....e........Q..B..6.$..v. .....E.K...%...v.H$..F".... .ef ..D..[g..Nr"c.....U{AA.i.L.0.zkT.P.......BV.q.....`6.....>...[...E:4..d^.7..L......vL.\..xL..f.......T.....I......%.>+...95.N...<].....h.o7..).-....]R#..]....I..(W9..P........((...E....i}.eY.ys.y..^....k....9.s_....I...&D..Zf.C.1...CnfxQb....#.K..]....^.;3..~.@...V......:i..9...6.vU2+D.z...U......N.%..d....%...s.7...NM...I.i...<v....:.B...{..B..>.T$..@+....\|Y.>........8..Wo......r./..r.hJ...a.Dm......f..Uk...F..k......f.\...L.....s..."M......k{Ib.%.E"C...J..Jj[.Y.;...d..@........A.}....+1). m.t~...-.f...J..Cu.Z]umgqZJ..IN........c.8"v.L.q.CzU..v...{.5U....WJ.:o..<...j}...J.Dif.f~.g....N.do.~.U......x....AJ"A.)..H.I.D......:...1X..~.....W.LE.......).q.Q......K.\..rw]p......)}xP...Zj.@...(B.8.!..9$Va.8...Q....o...k...LB.j.......l.0.G.B\|Q.o.j.U.vg+k.#.0.<8.....Z...xQ...m....x..s3.....d`....;.+..smW.8A.d..._........D...%..'.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	37
Entropy (8bit):	3.966210122385707
Encrypted:	false
SSDEEP:	3:YmESkA8ALQOECf6n:YmESRLECf6
MD5:	9266AED34D166F0B3F69A18E4EC9601F
SHA1:	97B2EC91E52614F3692071689DDB9FE5C40F627D
SHA-256:	8FDDC5539914861A61352C27E7270BE4097DEF323C8C46DEFF59A6F310B15657
SHA-512:	A28F78729031031BAD1CDA68E79DC7A830EF11ADB6067D6EBBB1273506CC7A1FC59EF549EFD5E64A64AF5AD4AF21489BBF043B171E82280D8318FB8D6FA8FAA7
Malicious:	false
Reputation:	low
Preview:	{"CartAbandonment":{"enabled":false}}

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	170778
Entropy (8bit):	5.306303987999574
Encrypted:	false
SSDEEP:	3072:fmThjeF7gCYmlvVGy2ls4gqkTnTpY3zBu526N0/x0KMigCdLyKoQPSxQXqPWGGhZ:77gCY0j2ls4gqkTn1Y3zBu526N0/x0KP
MD5:	F33CEB52783BC3340F5BD16F469731D4
SHA1:	A4409EE7948AFA1A472A75558791A5D8C73D2EAA
SHA-256:	DBF4DF62F5760E5622EDEB79424CF75DDB225C133BAD1B5938149A5A95AF9B5F
SHA-512:	AB3B2B0723ABFA5AE3A5E2B7B0B24FC2939EB17BD77E21CD1DE088F1574BCA78CE9E517FF93EF72E36895D70309767B3654970220B274941E0692F6DC617BE41
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/integrations/v8513.120578/default.js
Preview:	(()=>{var Mu=Object.create;var pt=Object.defineProperty,_u=Object.defineProperties,qa=Object.getOwnPropertyDescriptor,Iu=Object.getOwnPropertyDescriptors,ju=Object.getOwnPropertyNames,en=Object.getOwnPropertySymbols,Fu=Object.getPrototypeOf,us=Object.prototype.hasOwnProperty,La=Object.prototype.propertyIsEnumerable;var Ha=(r,e,t)=>e in r?pt(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t,g=(r,e)=>{for(var t in e\|\|(e={}))us.call(e,t)&&Ha(r,t,e[t]);if(en)for(var t of en(e))La.call(e,t)&&Ha(r,t,e[t]);return r},C=(r,e)=>_u(r,Iu(e)),qu=r=>pt(r,"__esModule",{value:!0}),s=(r,e)=>pt(r,"name",{value:e,configurable:!0});var ft=(r,e)=>{var t={};for(var n in r)us.call(r,n)&&e.indexOf(n)<0&&(t[n]=r[n]);if(r!=null&&en)for(var n of en(r))e.indexOf(n)<0&&La.call(r,n)&&(t[n]=r[n]);return t};var b=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports);var Lu=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let n of ju(e))!us.call(r,n)&&n!=="default"&&pt(r,n,{get:()=>e[n],enu

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 168, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	130424
Entropy (8bit):	7.990373753941302
Encrypted:	true
SSDEEP:	3072:wfmphz0LwUvqT+euA4dWrwXO5HRmx8V3eu99YHWcYhur0:Rp/UCT+euRdfO5xmx8hF9YHGQr0
MD5:	CBE6F63406D773C2BC51F401AA73626F
SHA1:	32B1207218B0F864E7A842CE2F19A98F266B7DCC
SHA-256:	325596C9249C43C62C88F24B0F2B2A5DEDC5398C0C7E0A5EEC61784161389763
SHA-512:	7D0B06D75C01B941A395BB03333788AAFF5EDCC71005F3576C0DDD1DD02C70B8F5F686C72089A0B8B5E8C9B8B52A7C5C00BCDBCFE7AACD6A3DD536CDD6F5C986
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...........7.....sRGB.........gAMA......a.....pHYs..........+......iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>..... - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-04-26</Attrib:Created>. <Attrib:ExtId>5eec93d8-a42e-4f63-bd8d-9791c27fcde7</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1125
Entropy (8bit):	5.260912759782171
Encrypted:	false
SSDEEP:	24:2dluNA6LfEhNzpky+6On5H4CI92wAOJ30p4YIQHG:cuA+fE9ky+p4TnH0lG
MD5:	5200D375FDE7FF59E3F854212952F4E0
SHA1:	4E0A01434A07629E724099EA3BDD81E63D222A07
SHA-256:	29F92A3EEEBB0C9024C2A33B347671E5F8F9A79D33C83C465EDCBFFAA1B3F732
SHA-512:	89DFA2EA3B794320A0DDAD74E7A2F71BAA7A4CE17980474E5101DE56AFCB4F6ED08EE778989D1FDBD7F2D3B1255E4A3BC157A528F83EE9603B4B978BD1D913D9
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/images/calendar_w.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}..</style>..<g transform="translate(-62.744 -90.903)">...<path class="st0" d="M382.7,176.2v-21.3c0-11.8,9.6-21.3,21.3-21.3s21.3,9.6,21.3,21.3v21.3c47.1,0,85.3,38.2,85.3,85.3v213.3....c0,47.1-38.2,85.3-85.3,85.3c-61,0-152.3,0-213.3,0c-47.1,0-85.3-38.2-85.3-85.3V261.6c0-47.1,38.2-85.3,85.3-85.3v-21.3....c0-11.8,9.6-21.3,21.3-21.3s21.3,9.6,21.3,21.3v21.3H382.7z M468.1,346.9H169.4v128c0,23.6,19.1,42.7,42.7,42.7h213.3....c23.6,0,42.7-19.1,42.7-42.7V346.9z M425.4,218.9v21.3c0,11.8-9.6,21.3-21.3,21.3s-21.3-9.6-21.3-21.3v-21.3h-128v21.3....c0,11.8-9.6,21.3-21.3,21.3s-

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	34661
Entropy (8bit):	7.9463868294086355
Encrypted:	false
SSDEEP:	768:k+MqfvNIahxekfKQRZ9niVuiFxpsr8ghhqGVm1M0Lm7Y4dMFTC1Gi/:5Mq3NIsxtfPXMEIghhnaM0L4Y716l/
MD5:	069C9FA5FDDE3DD2BF2CA932EFB2F116
SHA1:	F6827D8DF5384A723E30F8D9BF7549EC2779D32D
SHA-256:	F11DCF7AC7F9196980301284A456B45A1096A57F4C05C664561EA82BF4F3C2FC
SHA-512:	D6747F923B5A58F00DA3650C9D2FECEF94A68350782C155F7C44C40D2D5482B9E3DCBF27ECB105E941EC912599A62E62F9F020BF9FD8C3E061E8425941F25CFE
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HALEX.jpg
Preview:	......JFIF.....,.,....."Exif..MM...........................ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.........................................................................@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32064), with CRLF line terminators
Category:	downloaded
Size (bytes):	80285
Entropy (8bit):	5.557904945559755
Encrypted:	false
SSDEEP:	768:jY16Ge+9fSiMwUqOLi7pWoatdvOBoiWV/jo6+SrdvBUZ3I0muWptoC0MeEiA+vzT:jy6o9qcpWomaMVwSrrtmMiA+78Y
MD5:	8A3E902675FDE0E4AAADDB13D1DFC49F
SHA1:	A4195BE69256201A1455699E1A0FFE010B64C8DE
SHA-256:	36707C74DB8EFA918C31D30190167E11CFFE049F49915C06FC556C0A8EA8588C
SHA-512:	393C8F9FE4AB64DB6B154B322A4D9D02AF8A8824CA36E0356D867F16FD817AEB7333C0A7EAEA55CCBE8CD43CA5E01F0E4F9FF84507F737B6489E4498D284BF77
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/handlebars.min.js?v=393c8f9fe4ab64db6b154b322a4d9d02af8a8824ca36e0356d867f16fd817aeb7333c0a7eaea55ccbe8cd43ca5e01f0e4f9ff84507f737b6489e4498d284bf77
Preview:	/**!.... @license.. handlebars v4.7.6....Copyright (C) 2011-2019 by Yehuda Katz....Permission is hereby granted, free of charge, to any person obtaining a copy..of this software and associated documentation files (the "Software"), to deal..in the Software without restriction, including without limitation the rights..to use, copy, modify, merge, publish, distribute, sublicense, and/or sell..copies of the Software, and to permit persons to whom the Software is..furnished to do so, subject to the following conditions:....The above copyright notice and this permission notice shall be included in..all copies or substantial portions of the Software.....THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR..IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,..FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE..AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER..LIABILITY, WHETHER IN AN ACTION OF CONTRACT, T

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	170778
Entropy (8bit):	5.306303987999574
Encrypted:	false
SSDEEP:	3072:fmThjeF7gCYmlvVGy2ls4gqkTnTpY3zBu526N0/x0KMigCdLyKoQPSxQXqPWGGhZ:77gCY0j2ls4gqkTn1Y3zBu526N0/x0KP
MD5:	F33CEB52783BC3340F5BD16F469731D4
SHA1:	A4409EE7948AFA1A472A75558791A5D8C73D2EAA
SHA-256:	DBF4DF62F5760E5622EDEB79424CF75DDB225C133BAD1B5938149A5A95AF9B5F
SHA-512:	AB3B2B0723ABFA5AE3A5E2B7B0B24FC2939EB17BD77E21CD1DE088F1574BCA78CE9E517FF93EF72E36895D70309767B3654970220B274941E0692F6DC617BE41
Malicious:	false
Reputation:	low
Preview:	(()=>{var Mu=Object.create;var pt=Object.defineProperty,_u=Object.defineProperties,qa=Object.getOwnPropertyDescriptor,Iu=Object.getOwnPropertyDescriptors,ju=Object.getOwnPropertyNames,en=Object.getOwnPropertySymbols,Fu=Object.getPrototypeOf,us=Object.prototype.hasOwnProperty,La=Object.prototype.propertyIsEnumerable;var Ha=(r,e,t)=>e in r?pt(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t,g=(r,e)=>{for(var t in e\|\|(e={}))us.call(e,t)&&Ha(r,t,e[t]);if(en)for(var t of en(e))La.call(e,t)&&Ha(r,t,e[t]);return r},C=(r,e)=>_u(r,Iu(e)),qu=r=>pt(r,"__esModule",{value:!0}),s=(r,e)=>pt(r,"name",{value:e,configurable:!0});var ft=(r,e)=>{var t={};for(var n in r)us.call(r,n)&&e.indexOf(n)<0&&(t[n]=r[n]);if(r!=null&&en)for(var n of en(r))e.indexOf(n)<0&&La.call(r,n)&&(t[n]=r[n]);return t};var b=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports);var Lu=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let n of ju(e))!us.call(r,n)&&n!=="default"&&pt(r,n,{get:()=>e[n],enu

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39394), with no line terminators
Category:	dropped
Size (bytes):	39394
Entropy (8bit):	5.298955006107002
Encrypted:	false
SSDEEP:	768:VCSQzlfBwZ4LLT8Sc7vtdz8SW+t8yQxEugughR7nIwd7rUzNA:HQzlKZjz8etUoughRswd7rUzu
MD5:	9F82507B1D6096DC3F5AB31124471E6B
SHA1:	4FF203B41B3CEDD3D6D0ED3EC30D3C94F175481C
SHA-256:	20D79F60A4C87E7063520A07FF8FF15FDC10654E803D91229940253A6B6152A8
SHA-512:	B8B1BA8214F8517087A7350780A2900D115BC9FEDD9AB09F9D5FEF3E2FFEED69998A80F8E7687210D6ED4257C59623A5B5998EA870F7E1EA65AB9DBC021D8EBA
Malicious:	false
Reputation:	low
Preview:	(()=>{var t={4849:t=>{t.exports=function(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n},t.exports.__esModule=!0,t.exports.default=t.exports},9168:(t,e,r)=>{var n=r(4849);t.exports=function(t){if(Array.isArray(t))return n(t)},t.exports.__esModule=!0,t.exports.default=t.exports},3564:(t,e,r)=>{var n=r(4928);function o(t,e,r,o,i,a,c){try{var u=t[a](c),s=u.value}catch(t){return void r(t)}u.done?e(s):n.resolve(s).then(o,i)}t.exports=function(t){return function(){var e=this,r=arguments;return new n((function(n,i){var a=t.apply(e,r);function c(t){o(a,n,i,c,u,"next",t)}function u(t){o(a,n,i,c,u,"throw",t)}c(void 0)}))}},t.exports.__esModule=!0,t.exports.default=t.exports},7837:t=>{t.exports=function(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t},t.exports.__esModule=!0,t.exports.default=t.exports},8424:t=>{t.exports=function(t){return t&&t.__esModule?t:{default:t}},t.exports.__esModu

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 292 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11129
Entropy (8bit):	7.891811865636205
Encrypted:	false
SSDEEP:	192:oknOT7ikJGbTVs61TyaIhfb4Z822QCAHO7IaPND00rv249lYU2XUr43yoAT97:znY7iKcTV71Tyzby8HQVayk+49m9S4i5
MD5:	4E6F9FC3ACFC1A50AB7E7FD9F5A54DB3
SHA1:	40AA4D6D4CBA9AC153A9FD81A6230C3A382CA255
SHA-256:	012C21248660CF04A29F9EFEDCE75F697715692464EB93FD32249F929A839055
SHA-512:	AD0EBD0DF3836B05F9394AF0C94D1D9D4EE5A1B01E2270CB62EA6CE97E362F3E7171A6BB292D91953D78B2123275C7B5658DA8320642E7ED1E02C5D4D90A6A1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...d...../.M4....sRGB.........gAMA......a.....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2018-05-04T19:21:08+08:00" xmp:MetadataDate="2018-05-04T19:21:08+08:00" xmp:ModifyDate="2018-05-04T19:21:08+08:00" xmpMM:InstanceID="xmp.iid:b6224fa7-1d65-4b78-aecc-f2763a264832" xmpMM:DocumentID="adobe:docid:photoshop:23d53fd2-84c2-d446-8047-f50f6d5e2680" xmpMM:OriginalDocumentID="xmp.did:8a154104-cc32-41cf-

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16608)
Category:	downloaded
Size (bytes):	350298
Entropy (8bit):	5.602131184547535
Encrypted:	false
SSDEEP:	6144:e4KbGbgBu2okk2639cM8Gp/R2NAtu9BW24nOC:nKkcu2oklAAEZ
MD5:	84EBF39259BDA78EBC89F3DD42E764C1
SHA1:	23AB69636C5FB895FC8C7C9C8C6E4C5991FF92D0
SHA-256:	F474A984E8DB879F164593D38BDA3330876C30D6E74474A6F1B726FA6BBC7806
SHA-512:	305329A422F1651B059D0AFC70624F7F0BBDC187E1F8223CF1B515E5146C2E36B681A04496194C219458943142AFB9674C925FF7EF46EAC2B9E291138AAFDF41
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-MYEVWDEELX&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","be\\.synxis\\.com","harbour\\-plaza\\.com","harbourgrand\\.com","ramblerhotels\\.com","hotelalexandrahk\\.com"],"tag_id":108},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","be\\.synxis\\.com","harbour\\-plaza\\.com","harbourgrand\\.com","ramblerhotels\\.com","hotelalexandrahk\\.com"],"tag_id":110},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":111},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":112},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8099), with CRLF line terminators
Category:	dropped
Size (bytes):	8159
Entropy (8bit):	5.203689784678294
Encrypted:	false
SSDEEP:	192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIA:iEE/Amu6qUxVBxGkAI///IA
MD5:	5CCC5286F6D87963ED8474FF9ED6F146
SHA1:	6E6C6236AE0E36425CD195937D6D992CABB0907F
SHA-256:	6D76008B112EA700919E9EC1EF978F6C4A8D7E94CCF4594920486625D6F36486
SHA-512:	7E966998CBB05B3E9E28B04DC5F79A54C99E2FC905386D6C00FAC819AFD60EF061C3F8A3853FF065B40EE77C16F9D1D01F7D6F673133DD491BE8C48BBFEC8E2E
Malicious:	false
Reputation:	low
Preview:	/! WOW wow.js - v1.3.0 - 2016-10-04.. https://wowjs.uk..* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,exports);else{var c={exports:{}};b(c,c.exports),a.WOW=c.exports}}(this,function(a,b){"use strict";function c(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function d(a,b){return b.indexOf(a)>=0}function e(a,b){for(var c in b)if(null==a[c]){var d=b[c];a[c]=d}return a}function f(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)}function g(a){var b=arguments.length<=1\|\|void 0===arguments[1]?!1:arguments[1],c=arguments.length<=2\|\|void 0===arguments[2]?!1:arguments[2],d=arguments.length<=3\|\|void 0===arguments[3]?null:arguments[3],e=void 0;return null!=document.createEvent?(e=document.createEvent("CustomEvent"),e.initCustomEvent(a,b,c,d)):null!=document.createEventObject?(e=document.cr

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	5.260912759782171
Encrypted:	false
SSDEEP:	24:2dluNA6LfEhNzpky+6On5H4CI92wAOJ30p4YIQHG:cuA+fE9ky+p4TnH0lG
MD5:	5200D375FDE7FF59E3F854212952F4E0
SHA1:	4E0A01434A07629E724099EA3BDD81E63D222A07
SHA-256:	29F92A3EEEBB0C9024C2A33B347671E5F8F9A79D33C83C465EDCBFFAA1B3F732
SHA-512:	89DFA2EA3B794320A0DDAD74E7A2F71BAA7A4CE17980474E5101DE56AFCB4F6ED08EE778989D1FDBD7F2D3B1255E4A3BC157A528F83EE9603B4B978BD1D913D9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 512 512" style="enable-background:new 0 0 512 512;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}..</style>..<g transform="translate(-62.744 -90.903)">...<path class="st0" d="M382.7,176.2v-21.3c0-11.8,9.6-21.3,21.3-21.3s21.3,9.6,21.3,21.3v21.3c47.1,0,85.3,38.2,85.3,85.3v213.3....c0,47.1-38.2,85.3-85.3,85.3c-61,0-152.3,0-213.3,0c-47.1,0-85.3-38.2-85.3-85.3V261.6c0-47.1,38.2-85.3,85.3-85.3v-21.3....c0-11.8,9.6-21.3,21.3-21.3s21.3,9.6,21.3,21.3v21.3H382.7z M468.1,346.9H169.4v128c0,23.6,19.1,42.7,42.7,42.7h213.3....c23.6,0,42.7-19.1,42.7-42.7V346.9z M425.4,218.9v21.3c0,11.8-9.6,21.3-21.3,21.3s-21.3-9.6-21.3-21.3v-21.3h-128v21.3....c0,11.8-9.6,21.3-21.3,21.3s-

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 292 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11129
Entropy (8bit):	7.891811865636205
Encrypted:	false
SSDEEP:	192:oknOT7ikJGbTVs61TyaIhfb4Z822QCAHO7IaPND00rv249lYU2XUr43yoAT97:znY7iKcTV71Tyzby8HQVayk+49m9S4i5
MD5:	4E6F9FC3ACFC1A50AB7E7FD9F5A54DB3
SHA1:	40AA4D6D4CBA9AC153A9FD81A6230C3A382CA255
SHA-256:	012C21248660CF04A29F9EFEDCE75F697715692464EB93FD32249F929A839055
SHA-512:	AD0EBD0DF3836B05F9394AF0C94D1D9D4EE5A1B01E2270CB62EA6CE97E362F3E7171A6BB292D91953D78B2123275C7B5658DA8320642E7ED1E02C5D4D90A6A1A
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HG.png
Preview:	.PNG........IHDR...$...d...../.M4....sRGB.........gAMA......a.....pHYs..........+......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2018-05-04T19:21:08+08:00" xmp:MetadataDate="2018-05-04T19:21:08+08:00" xmp:ModifyDate="2018-05-04T19:21:08+08:00" xmpMM:InstanceID="xmp.iid:b6224fa7-1d65-4b78-aecc-f2763a264832" xmpMM:DocumentID="adobe:docid:photoshop:23d53fd2-84c2-d446-8047-f50f6d5e2680" xmpMM:OriginalDocumentID="xmp.did:8a154104-cc32-41cf-

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34
Entropy (8bit):	4.006436738245532
Encrypted:	false
SSDEEP:	3:YIWZ6W/4:YIk/4
MD5:	4B0DAA2E38B5D6FD84BB3B3648306453
SHA1:	649BEA752889C6E6DCE9EF26937AB5CBCE64B174
SHA-256:	19768D0A9A36A10B41536D15497DD6A5F8289DAD900EA45B5E20BD6D53D51327
SHA-512:	78446387A7FC4AA57C89E86C5F3B161ECAB9EE369AF46A957DF9C8A6377EF804A2EE322A7DE06EEDA58DA3B8917ADF2F6AB75429D324B50F92A44576294F399A
Malicious:	false
Reputation:	low
Preview:	{"messages":[],"notifications":{}}

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	downloaded
Size (bytes):	57899
Entropy (8bit):	5.522455573366164
Encrypted:	false
SSDEEP:	768:etkIzpGt8BbK1WYyk37g4KzbamUmIz3MFeV65sHqVbwxE4Fv:etkMGOKzp0Fzba7mIY/wxHFv
MD5:	40BFFB471FB2F71902C292A6764692DB
SHA1:	CD042D148E78D93D506395B1222F071AFF6F3610
SHA-256:	3A1AE68D835D095297598E1964665FED616649A20FD7D3BFDC6A97C9B468ACD6
SHA-512:	2F3F4E418B053D43BC2FE7150AF36DCF65195A5E3847972EBF8F3AB8809B9378CD3D34DEFBD629BC3A2C2DE15E7D14A6963BB34CAB68F342BC480D0A64ABE02B
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion.js
Preview:	(function(){var n,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},la={};function u(a,b,c){if(!c\|\|a!=null){c=la[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3139), with no line terminators
Category:	dropped
Size (bytes):	3139
Entropy (8bit):	5.082029099056065
Encrypted:	false
SSDEEP:	96:KMH2zO6oaj2Vgh8d1qq0JDUyX6cE1dtrG1adE2WWIf+V:KMWfKvqTUxdGI+0x
MD5:	FA7C7CD917D05919B395A1323D44D361
SHA1:	D016686D26327491C2400E4245ABAD301C615C1D
SHA-256:	7C8974CBE4D808E25EFB0339C434E4EB77A45C4F59C49B301E78795CEBB93C04
SHA-512:	3040B6E977BF8CE90599A795584D5CE8699C62876E840841A8160B6CEA8A43AF24792B40D7F44D8041047963A52BBA1B628811B3E4447943BDB2287EFEF34D8B
Malicious:	false
Reputation:	low
Preview:	function ttRetargeting(){var s=window&&window.document\|\|document,o=window.BEE_SERVER_URL\|\|"https://b.triptease.io",t=window.BEE_WINDOW_LOCATION_URL\|\|window.location.href,a=!!function(e){if(t)return(e=t.match(new RegExp(e+"=([^&]*)")))&&e[1];return}("tt_rt"),c="",d=[],p=[];function u(e,t,r){var i;s.getElementById(t)\|\|((i=s.createElement(e)).setAttribute("id",t),i.setAttribute("src",r),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("style","display: none"),"iframe"===e&&(i.setAttribute("title","blank"),i.setAttribute("aria-hidden","true")),s.body.appendChild(i))}function g(t,e){(e=e\|\|p).forEach(function(e){e.postMessage(t,o)})}function I(t){0<d.filter(function(e){return JSON.stringify(e)===JSON.stringify(t)}).length\|\|(d.push(t),g(t))}function f(e,t,r){var i,n,s,a=window.localStorage.getItem("tt_bw_id"),c=e.payload,r={currency:c.currency\|\|r.currency,reference:c.reference\|\|r.reservationId,price:c.price\|\|r.totalPrice,checkin:c.checkin,checkout:c.checkout,basePrice:c

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	17477
Entropy (8bit):	7.925236337903704
Encrypted:	false
SSDEEP:	384:xtLix4a/KsUJrtRoqFGFnjOeG4Ry9SBYOx3x32FzJ:xtkDKjBtRoqFyCT449c34J
MD5:	AA9BE40E88CA5EE3A0C4F7FEF18B891E
SHA1:	E58695C7E8866D63512D5D2A07BEDDEE56AF7A29
SHA-256:	861C7A4961577E63D4327B3EC3815BDB38C28831BCD9028DEDB11AC9A4189B20
SHA-512:	A4F972DBE545C1E1CCE7D47DBD3764988243693004B4E36A870BC158ED559BDCAF996C75F86B322C4A448431C699BCE245295659DFC825090850462ED975D579
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*...........................................(.......................i.......V.................0231....................0100....................@...................`.......`...........http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Staff Offer_320x168 - 2</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-09-03</Attrib:Created>. <Attrib:ExtId>151c866d-829e-46e5-8c0a-4b9b95334dde</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	17477
Entropy (8bit):	7.925236337903704
Encrypted:	false
SSDEEP:	384:xtLix4a/KsUJrtRoqFGFnjOeG4Ry9SBYOx3x32FzJ:xtkDKjBtRoqFyCT449c34J
MD5:	AA9BE40E88CA5EE3A0C4F7FEF18B891E
SHA1:	E58695C7E8866D63512D5D2A07BEDDEE56AF7A29
SHA-256:	861C7A4961577E63D4327B3EC3815BDB38C28831BCD9028DEDB11AC9A4189B20
SHA-512:	A4F972DBE545C1E1CCE7D47DBD3764988243693004B4E36A870BC158ED559BDCAF996C75F86B322C4A448431C699BCE245295659DFC825090850462ED975D579
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/KHFH9.jpg
Preview:	......JFIF..............Exif..II*...........................................(.......................i.......V.................0231....................0100....................@...................`.......`...........http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Staff Offer_320x168 - 2</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-09-03</Attrib:Created>. <Attrib:ExtId>151c866d-829e-46e5-8c0a-4b9b95334dde</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Category:	downloaded
Size (bytes):	573427
Entropy (8bit):	5.232604095139064
Encrypted:	false
SSDEEP:	6144:raxs2mFI6L7D1cwa7huTfcfs3G+Nh8GBLf:raxsHFhq9+fcfs3GaNBLf
MD5:	36B40554030FC0D417B8B045929BFF22
SHA1:	AF77A0B76462EE1A9D2DAF6033F6102706FDCA84
SHA-256:	BDC8E725D74945D4E3BE56B6BD5E405455BEFF5A68AFDDB0EBB9311CF276E6D5
SHA-512:	63C898E7A1C43E391F18724E7CD8B0E0D236BC5AA25CC5BC1FA509562A584E616A39CB1DBE896C7F8A69FAFDD3A1BFB54934AEC098A1640AD9C7E6FE50D1F4BF
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/harbour-plaza.js?v=63c898e7a1c43e391f18724e7cd8b0e0d236bc5aa25cc5bc1fa509562a584e616a39cb1dbe896c7f8a69fafdd3a1bfb54934aec098a1640ad9c7e6fe50d1f4bf
Preview:	/!.. Webflow: Front-end site library.. * @license MIT.. * Inline scripts may access the api using an async handler:.. * var Webflow = Webflow \|\| [];.. * Webflow.push(readyFunction);.. /../***/ (function(modules) { // webpackBootstrap../**/ .// The module cache../**/ .var installedModules = {};../**/../**/ .// The require function../**/ .function __webpack_require__(moduleId) {../**/../**/ ..// Check if module is in cache../**/ ..if(installedModules[moduleId]) {../**/ ...return installedModules[moduleId].exports;../**/ ..}../**/ ..// Create a new module (and put it into the cache)../**/ ..var module = installedModules[moduleId] = {../**/ ...i: moduleId,../**/ ...l: false,../**/ ...exports: {}../**/ ..};../**/../**/ ..// Execute the module function../**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);../**/../**/ ..// Flag the module as loaded../****/ ..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2898
Entropy (8bit):	6.551690278459831
Encrypted:	false
SSDEEP:	48:SeLNn2yY8naJ3WtY5JWg2iMn/+7fXfwOfK2BUZU2MgaL3DvD92Ehznx:92t8nLtY5JWTn/OfXfFfbVvgaL3DvD9x
MD5:	2DE6DC9378E127C8F4721DF963E4DC23
SHA1:	A67EACCEA44B572813E81242F3788CB705EB930E
SHA-256:	B9BD0A08DA0E0C8D25C1B9399A49157961B0DDDCBBAD87529C9213502B5D878A
SHA-512:	621D83F0B1B81DCA2817CB4EEEC35AC5A3383C5C0F04070368523087417805B467B4A048A257CB4E9EF45E8AD63BA4020552FD3A8750E1D1DC9DD9F1C8F6EB45
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.1 (Windows)" xmpMM:InstanceID="xmp.iid:72AF6E184D2111EC8FC4CE7359CEC427" xmpMM:DocumentID="xmp.did:72AF6E194D2111EC8FC4CE7359CEC427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:72AF6E164D2111EC8FC4CE7359CEC427" stRef:documentID="xmp.did:72AF6E174D2111EC8FC4CE7359CEC427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.m......PLTE...........................................................................................................

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=4480, bps=0, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R, orientation=upper-left, width=6720], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	45723
Entropy (8bit):	7.468260231907668
Encrypted:	false
SSDEEP:	768:ZJz5zJ8TYyRRVdZuo8nuLp5AiirZbqdYohzZTG6AaVnS2kbim8vt4:Z1pJwD3oRnK52od9hPSDb/+q
MD5:	F1174A52BF24C6B8769AE24943036D34
SHA1:	DEA1EDA7896A3D66D07719C6329343E255AB304D
SHA-256:	9C5DC977EE7335569B0F21D30083BDE0B34734DEE377E8FDC0925C95D13EA4BB
SHA-512:	43B76E2C58A6B40BD265DE345E156CD0DCFEECB6B240999EDE720E709900391039E42E388ED703E9C5E40D3EEABC33030F90FDA0906490F500B54C262E916CAE
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/ROH.jpg
Preview:	......JFIF..............Exif..MM.*...............@...............................................................................................................(...........1...........2...........i.............X......Canon.Canon EOS R..$....'..$....'.Adobe Photoshop CS5.1 Windows.2019:10:15 10:04:04.. ........................."...........'...........0...........2.................0231..............................................................................................................73..........73.........................@.................................................................................................1...........2...........4.........4.5.........J....................2018:07:29 06:22:36.2018:07:29 06:22:36....x..B@.i....B@..........................UU......UU....068022003208.............#....................EF16-35mm f/4L IS USM.0000000000...........................................(.........................................H.......H.........C..............

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14291), with no line terminators
Category:	downloaded
Size (bytes):	14291
Entropy (8bit):	5.241778974353157
Encrypted:	false
SSDEEP:	384:NzCqT2K0Er+a/mcQ7HsTgMJCf2DqMPtGMw9X:pCqiKh/LTgT4Q
MD5:	C2915CE5776E1A7028453277991D6B13
SHA1:	3F9D31E43CAF89CDE83FA69C7C46D881C1F84D68
SHA-256:	AA2BB53F6EBC7B34633EE64AAD6E4287323F71E4A37DA3ACA923DA3B1B603F3D
SHA-512:	80A23F7EED3A679C8F6CAA6550859013C2EE2859D50F2BA67E321D568A5C62EBA125156AB46B0788800D6C0050D9EA3236AC054CE8679F44A7C915BD36CD634E
Malicious:	false
Reputation:	low
URL:	https://d.turn.com/r/dft/id/L21rdC8xMDk4L3BpZC84Njc2MzQ5OC90LzA
Preview:	!function(){var a=void 0,b=function(a,b){function c(a){return a?d(a):void 0}function d(a){for(var b in c.prototype)a[b]=c.prototype[b];return a}return a.exports=b,a.exports=c,c.prototype.on=function(a,b){return this._callbacks=this._callbacks\|\|{},(this._callbacks[a]=this._callbacks[a]\|\|[]).push(b),this},c.prototype.once=function(a,b){function c(){d.off(a,c),b.apply(this,arguments)}var d=this;return this._callbacks=this._callbacks\|\|{},b._off=c,this.on(a,c),this},c.prototype.off=c.prototype.removeListener=c.prototype.removeAllListeners=function(a,b){if(this._callbacks=this._callbacks\|\|{},0==arguments.length)return this._callbacks={},this;var c=this._callbacks[a];if(!c)return this;if(1==arguments.length)return delete this._callbacks[a],this;var d=index(c,b._off\|\|b);return~d&&c.splice(d,1),this},c.prototype.emit=function(a){this._callbacks=this._callbacks\|\|{};var b=[].slice.call(arguments,1),c=this._callbacks[a];if(c){c=c.slice(0);for(var d=0,e=c.length;e>d;++d)c[d].apply(this,b)}return th

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 330 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10846
Entropy (8bit):	7.925459426297656
Encrypted:	false
SSDEEP:	192:wO9W+KNjVIJGtwDtxPJHe18yR2EhAzrwqTZHW0PQY2ipWhW/dbhWTsK0vwpofI4V:wuWxVY5tJBe1LAzrwGH/QYTpBhVwpM3Z
MD5:	A57F0C0FED209B97DB400C81A3C5E528
SHA1:	76C020C78DCBD9767C6AF4C81F220002387BEDE0
SHA-256:	6018EEA6222CDA95C89DB29251BFBADCA525547F12144ECE157AE8973031E499
SHA-512:	0E34B7305A768D83A5908253A3037346EC2E605F0A0DC0EA10A8FAEB622987F711620F5E66295F04E853EE3653184F7939D4854E02558302700836337A1991B7
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/hotel_brands/4/bdd61253-01cf-4857-a56e-2d89bad0f4e6.png
Preview:	.PNG........IHDR...J.................tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmpMM:InstanceID="xmp.iid:FDBBFD2D356011EBA6C489C9F1DB5FF7" xmpMM:DocumentID="xmp.did:FDBBFD2E356011EBA6C489C9F1DB5FF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FDBBFD2B356011EBA6C489C9F1DB5FF7" stRef:documentID="xmp.did:FDBBFD2C356011EBA6C489C9F1DB5FF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...a..&.IDATx..]...E..x..Ib@...F.......E0....b..Q..... .(.... .....XE]1 bB.L......gjj......\|..:o^OOuwu./.W.***D.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23236, version 1.0
Category:	downloaded
Size (bytes):	23236
Entropy (8bit):	7.986328239479246
Encrypted:	false
SSDEEP:	384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK
MD5:	716309AAB2BCA045F9627F63AD79D0BF
SHA1:	38804233A29AAF975D557FE14E762C627BEF76E0
SHA-256:	115F6A626CA115D4AD5581B59275327E0E860B30330A52B0F785561332DD2429
SHA-512:	ADB0BC6CB9B230EDA5DAC7396A94A9A4DBA9C8BA0B2EB73F5F21A20C3CA3D14651420BC6A17E67A71B5BBA624F5A4E92D55CBBB898985DCCA838184F6DFB2B15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
Preview:	wOF2......Z........\..Z^..........................z.p.`..`..D....s...........B.....6.$..v. .....E.r........}Q.J..0..m..%h...1/<...J......z..........N&2\.K{iZ.....F$.AZ.!.=..a(...mv..t.6d..lH2..E}..j2..oq..Q..B#..........i.....\..%...0.Os..f.^;}..J....i..>]..w-...rN&#Y.N.9n.......[.=d...y..;...54..`7(.......!......b...$$..{._...\|.;...7....0...Wlls..8.P.[.Ts.tu.T...c....F.g.;.....@.^/3......U0..Pu..;]......%.:...Z../..t..(..p..#..!!-...}.#..ET.Q5A._K.6...Q\.7,....8.E....R.ATPQ..(iI..60.Y....^....\.7}.z....c......Y}Y....1....(...y.!Z.,...h...{.n....j....8.&..!....0'....m....7..L...rA...C..K....I..0.l8...A...."......'...........,M`.`.}..2.."<.MW[.....?..5..;.`.".d..dU..........V1..W.O.,.....r....+./.....z.m\..2...l ..6....... .+J..k..T%..4Uy..U.#.=....]'...f...R.u.Z......s.g.P+\....(....$...W....s'.{.R'...>..5f.R..9......&.`.A....b.Jexn.$..g.4.../.#.VR.B%.f+3&.qb.?...:.~........:Dg.5,...j.B..B.^-.......?.ig......(..O..~ ..\...T%:......P..M."..+.++_4...

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	38918
Entropy (8bit):	7.943023033209985
Encrypted:	false
SSDEEP:	768:p2PZJdmEOBePdupFzkiaRU6TLsC7SVRa/5+gg/GqR/xh2ddUGxS:p2xluzM+6TJSVs+gSTRJh8dTS
MD5:	8298C10F80FFFFCD0775E7D641ABF301
SHA1:	A4C0463B8DD3C0548D2727F59DC904B450742114
SHA-256:	63B30D4D1E76BDAACBDA312F94B2CD8F7C678448FF1F44CB5420CB84493D17B2
SHA-512:	4957138E2F0FCC38A3A54FBB1040D348B406BA86DA1567AB99F2C7113FCB30B5C75B41F436B77D9C13BD0A50AEB9817AA2BA96B7BC09C59729C4706DF159FCC3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......Exif..MM.*.............................V...........^.(.......................i.........f.......`.......`..............0231...................:............0100.....................@..................ASCII...xr:d:DAF9Z2tVOOY:3,j:952930679670590853,t:24022107....http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">CK Offer Graphic - 1</rdf:li>......</rdf:Alt>.....</dc:title>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:Attrib="http://ns.attribution.com/ads/1.0/">.....<Attrib:Ads>......<rdf:Seq>.......<rdf:li rdf:parseType="Resource">........<Attrib:Created>2024-02-21</Attrib:Created>........<Attrib:ExtId>415e8b44-d454-4aea-ae9b-324be889bb51</Attrib:ExtId>........<Attrib:FbId>525265914179580</Attrib:FbId>........<Attrib:TouchType>

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	251656
Entropy (8bit):	5.138637469360509
Encrypted:	false
SSDEEP:	3072:FFTBvwLO9nae3FGZ8DCbbDgUJASo/LV+VxWc1JRwznf3s:TZkOIuFKXDg/+Vx
MD5:	26C055485F62FD917862D8657E557BD6
SHA1:	6EB156EE060B1F51CDF951D9725FC03D077543E1
SHA-256:	4BE5F5702D2B79FFB7A10DEDB49A76ECAF92178E79A9193E50C41E17E58EC463
SHA-512:	599C75AC88AA53FCB8E8DFE27171EA2EBA050829EFCD7CF248866311A7839CB9153B3FB83C48A8D003276742257E159601DACEDAE0845F63CF23B64B6D82167A
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/jquery-ui.min.js?v=599c75ac88aa53fcb8e8dfe27171ea2eba050829efcd7cf248866311a7839cb9153b3fb83c48a8d003276742257e159601dacedae0845f63cf23b64b6d82167a
Preview:	!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){t.ui=t.ui\|\|{};t.ui.version="1.12.1";var e,i=0,s=Array.prototype.slice;t.cleanData=(e=t.cleanData,function(i){var s,n,o;for(o=0;null!=(n=i[o]);o++)try{(s=t._data(n,"events"))&&s.remove&&t(n).triggerHandler("remove")}catch(t){}e(i)}),t.widget=function(e,i,s){var n,o,a,r={},h=e.split(".")[0],l=h+"-"+(e=e.split(".")[1]);return s\|\|(s=i,i=t.Widget),t.isArray(s)&&(s=t.extend.apply(null,[{}].concat(s))),t.expr[":"][l.toLowerCase()]=function(e){return!!t.data(e,l)},t[h]=t[h]\|\|{},n=t[h][e],o=t[h][e]=function(t,e){if(!this._createWidget)return new o(t,e);arguments.length&&this._createWidget(t,e)},t.extend(o,n,{version:s.version,_proto:t.extend({},s),_childConstructors:[]}),(a=new i).options=t.widget.extend({},a.options),t.each(s,function(e,s){t.isFunction(s)?r[e]=function(){function t(){return i.prototype[e].apply(this,arguments)}function n(t){return i.prototype[e].apply(this,t)}return function(){var e,

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1192
Entropy (8bit):	6.610876678136866
Encrypted:	false
SSDEEP:	24:31hzVWwjx82lY2T3WVnqSyJ3VIixGyzFKrka+TJ:FJwNn2qqJ3WELzF6hiJ
MD5:	A702E27AD90E36FA8844A2421E264471
SHA1:	25BDB7B5691613277FDA5DE8D60035EAA23A079E
SHA-256:	0EC2795129F20BFB3EB398520E1BB16C4CDF5F26ACC1ABC86E348FA13313BCAC
SHA-512:	B5E15048BF140AB2575867CC24851B585312386825318044546FE8D2774D596175DCA7B4EC6F238EF523BFBFB9C902C8E58756281AEA99E750ECD263148ADC11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:13E5D4D6EF3211EAAEE6853A279006E5" xmpMM:DocumentID="xmp.did:13E5D4D7EF3211EAAEE6853A279006E5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:13E5D4D4EF3211EAAEE6853A279006E5" stRef:documentID="xmp.did:13E5D4D5EF3211EAAEE6853A279006E5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..=k.Q.E'"..T6..RDH...{;!."...k....K.[...D...!......Y....:M......kI.X@]t..f....D..V..YW.1...

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 57, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3117
Entropy (8bit):	7.714298965038531
Encrypted:	false
SSDEEP:	48:KBvnexJJ35vtWFEckcSRpiBuefJrkpda+LGWO8cN03+P1lNFbw:so1tWusfRkpd8Xt0OtlQ
MD5:	05661A8F11D7D9716C06089B0D66DD0B
SHA1:	67E922C41E34E4793FC8E21D67BC80D454650BD5
SHA-256:	58AF42610FAB2AC89285354E1FBCD6CB9B9E99E7E15A2C1C0A9A3CFF6E9DBAA6
SHA-512:	63003F360C54775650EA3C1B0E46ECD5AFC648BC08F36C9777CEA9A40A6323AE6310678BA5ED6F7C8A0BD208A7F297A15012761132D245FF58AB353C4A16B735
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...9.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:B2853F6724E111EBA083F586F120279A" xmpMM:InstanceID="xmp.iid:B2853F6624E111EBA083F586F120279A" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:66265916F3D611EA93298346D5121DD3" stRef:documentID="xmp.did:66265917F3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..F....IDATx..[...S...].J.].+jsI.."..I.E..T.F..Rf..A.#S...F..T.lH...%.ju...T....z....8......o.j.w....;.........[.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8099), with CRLF line terminators
Category:	downloaded
Size (bytes):	8159
Entropy (8bit):	5.203689784678294
Encrypted:	false
SSDEEP:	192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIA:iEE/Amu6qUxVBxGkAI///IA
MD5:	5CCC5286F6D87963ED8474FF9ED6F146
SHA1:	6E6C6236AE0E36425CD195937D6D992CABB0907F
SHA-256:	6D76008B112EA700919E9EC1EF978F6C4A8D7E94CCF4594920486625D6F36486
SHA-512:	7E966998CBB05B3E9E28B04DC5F79A54C99E2FC905386D6C00FAC819AFD60EF061C3F8A3853FF065B40EE77C16F9D1D01F7D6F673133DD491BE8C48BBFEC8E2E
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/wow.min.js?v=7e966998cbb05b3e9e28b04dc5f79a54c99e2fc905386d6c00fac819afd60ef061c3f8a3853ff065b40ee77c16f9d1d01f7d6f673133dd491be8c48bbfec8e2e
Preview:	/! WOW wow.js - v1.3.0 - 2016-10-04.. https://wowjs.uk..* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,exports);else{var c={exports:{}};b(c,c.exports),a.WOW=c.exports}}(this,function(a,b){"use strict";function c(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function d(a,b){return b.indexOf(a)>=0}function e(a,b){for(var c in b)if(null==a[c]){var d=b[c];a[c]=d}return a}function f(a){return/Android\|webOS\|iPhone\|iPad\|iPod\|BlackBerry\|IEMobile\|Opera Mini/i.test(a)}function g(a){var b=arguments.length<=1\|\|void 0===arguments[1]?!1:arguments[1],c=arguments.length<=2\|\|void 0===arguments[2]?!1:arguments[2],d=arguments.length<=3\|\|void 0===arguments[3]?null:arguments[3],e=void 0;return null!=document.createEvent?(e=document.createEvent("CustomEvent"),e.initCustomEvent(a,b,c,d)):null!=document.createEventObject?(e=document.cr

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89478
Entropy (8bit):	5.2899182577550565
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8
MD5:	B61AA6E2D68D21B3546B5B418BF0E9C3
SHA1:	9C1398F0DE4C869DACB1C9AB1A8CC327F5421FF7
SHA-256:	F36844906AD2309877AAE3121B87FB15B9E09803CB4C333ADC7E1E35AC92E14B
SHA-512:	5882735D9A0239C5C63C5C87B81618E3C8DC09D7D743C3444C535B9547B9B65DEFA509D7804552C581CB84B61DD1225E2ADD5DCA6B120868EC201FA979504F4B
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/jquery-3.5.1.min.js?v=5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	dropped
Size (bytes):	57899
Entropy (8bit):	5.522455573366164
Encrypted:	false
SSDEEP:	768:etkIzpGt8BbK1WYyk37g4KzbamUmIz3MFeV65sHqVbwxE4Fv:etkMGOKzp0Fzba7mIY/wxHFv
MD5:	40BFFB471FB2F71902C292A6764692DB
SHA1:	CD042D148E78D93D506395B1222F071AFF6F3610
SHA-256:	3A1AE68D835D095297598E1964665FED616649A20FD7D3BFDC6A97C9B468ACD6
SHA-512:	2F3F4E418B053D43BC2FE7150AF36DCF65195A5E3847972EBF8F3AB8809B9378CD3D34DEFBD629BC3A2C2DE15E7D14A6963BB34CAB68F342BC480D0A64ABE02B
Malicious:	false
Reputation:	low
Preview:	(function(){var n,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},la={};function u(a,b,c){if(!c\|\|a!=null){c=la[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1091), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	42444
Entropy (8bit):	4.85713245328807
Encrypted:	false
SSDEEP:	384:IVoNlZcJniGLPq7cLAPFxF1oAfiHeoTYpI4nYtXYa2P:I+NlZc9isPq7cLAPfbKHeoTYpI4nYtw
MD5:	CF3C9D1AA7464065D52FF1AA822D5FCE
SHA1:	A43B7AF0C8B372210E563B125A41E04124694F27
SHA-256:	DB0426613DE8B551F9E3D4AE9CD1A5BAE03ACDCE39119F5A5712C75015881BE6
SHA-512:	37746E543E9E0E690E715EE807CFCD97B2E604E6B94E1F8463AAB530279F66BA289ECFE9B5145AA4FAA2AFA29802A36C8356A64957008B0D2BE878660623F4CB
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/en/staff-offer
Preview:	<!DOCTYPE html>. Last Published: 2024-10-15 17:52:00 +08:00 -->.<html website-id="9" lang="en-us" data-wf-page="5f7af0c4c235a747425d56d2" data-wf-site="5f61b4448e30e64d6b38e77f">..<head>...<meta charset="utf-8">...<title>CK Group Staff Offer</title>...<meta content="CK Group Staff Offer" property="og:title">...<meta content="CK Group Staff Offer" property="twitter:title"><meta content="width=device-width, initial-scale=1" name="viewport">..<script type="text/javascript">. ! function (o, c) {. var n = c.documentElement,. t = " w-mod-";. n.className += t + "js", ("ontouchstart" in o \|\| o.DocumentTouch && c instanceof DocumentTouch) && (n.className += t + "touch"). }(window, document);.</script>..<link href="/group/files/website/9/6a73eba7-9673-4d1d-a795-72c1dc3246cf.png" rel="shortcut icon" type="image/x-icon">.<link href="/group/files/website/9/dc601685-fbc7-4046-b0c1-528acf8f84a7.png" rel="apple-touch-icon">..<meta charset="UTF-8">.<meta http-equiv="Content-Language"

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	18715
Entropy (8bit):	7.9294336068132205
Encrypted:	false
SSDEEP:	384:xtwbxmq6eKZSoGvULl48qSACcetbKedUa0HE2R1NStbbKdOOFVf160WE9mcbat9y:xtW0eHvRaAVlkMSbbKdR7f1R9N240a
MD5:	5986C0B36E4BAAEF0013C8A6FD054BAF
SHA1:	6A77AA6B3258B8230F4FBBBD97EE072C62125512
SHA-256:	D590741715480D1549A5F40442EDBB5D9A5FC1DB061C5510E35B12A33A5F852A
SHA-512:	7E0093AFE47730F2D1BA433A604CF69C63D6B8263C8152F06D991C6E3C012D2B485A0AF55E9E1A40630F69F1FF719D292B9556C9418AE57BF58CDE0AD109515A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*...........................................(.......................i.......V.................0231....................0100....................@...................`.......`...........http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Staff Offer_320x168 - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-09-03</Attrib:Created>. <Attrib:ExtId>0de40788-2845-47ec-9ff1-2c028bc52356</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	89478
Entropy (8bit):	5.2899182577550565
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvaks:/Yh8eip3huuf6IidlrvakdtQ47GK8
MD5:	B61AA6E2D68D21B3546B5B418BF0E9C3
SHA1:	9C1398F0DE4C869DACB1C9AB1A8CC327F5421FF7
SHA-256:	F36844906AD2309877AAE3121B87FB15B9E09803CB4C333ADC7E1E35AC92E14B
SHA-512:	5882735D9A0239C5C63C5C87B81618E3C8DC09D7D743C3444C535B9547B9B65DEFA509D7804552C581CB84B61DD1225E2ADD5DCA6B120868EC201FA979504F4B
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	251656
Entropy (8bit):	5.138637469360509
Encrypted:	false
SSDEEP:	3072:FFTBvwLO9nae3FGZ8DCbbDgUJASo/LV+VxWc1JRwznf3s:TZkOIuFKXDg/+Vx
MD5:	26C055485F62FD917862D8657E557BD6
SHA1:	6EB156EE060B1F51CDF951D9725FC03D077543E1
SHA-256:	4BE5F5702D2B79FFB7A10DEDB49A76ECAF92178E79A9193E50C41E17E58EC463
SHA-512:	599C75AC88AA53FCB8E8DFE27171EA2EBA050829EFCD7CF248866311A7839CB9153B3FB83C48A8D003276742257E159601DACEDAE0845F63CF23B64B6D82167A
Malicious:	false
Reputation:	low
Preview:	!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){t.ui=t.ui\|\|{};t.ui.version="1.12.1";var e,i=0,s=Array.prototype.slice;t.cleanData=(e=t.cleanData,function(i){var s,n,o;for(o=0;null!=(n=i[o]);o++)try{(s=t._data(n,"events"))&&s.remove&&t(n).triggerHandler("remove")}catch(t){}e(i)}),t.widget=function(e,i,s){var n,o,a,r={},h=e.split(".")[0],l=h+"-"+(e=e.split(".")[1]);return s\|\|(s=i,i=t.Widget),t.isArray(s)&&(s=t.extend.apply(null,[{}].concat(s))),t.expr[":"][l.toLowerCase()]=function(e){return!!t.data(e,l)},t[h]=t[h]\|\|{},n=t[h][e],o=t[h][e]=function(t,e){if(!this._createWidget)return new o(t,e);arguments.length&&this._createWidget(t,e)},t.extend(o,n,{version:s.version,_proto:t.extend({},s),_childConstructors:[]}),(a=new i).options=t.widget.extend({},a.options),t.each(s,function(e,s){t.isFunction(s)?r[e]=function(){function t(){return i.prototype[e].apply(this,arguments)}function n(t){return i.prototype[e].apply(this,t)}return function(){var e,

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.5178777979673965
Encrypted:	false
SSDEEP:	3:xPVOjhndP+twmnge1q5R:xPqPaj11qz
MD5:	CA678E645CAB8AB575DB0EF04F6F8B89
SHA1:	CAA2D622BB08380575284493E1040D54CA5579C8
SHA-256:	D757F1393878229BCBC4DA3D16FF736670E474F9001B5D73B0E48A6D8BB32E04
SHA-512:	432CC3B2AFCD2F56DD1B6D88234D892237A562CE9D82291D7913A579851303249A2716B5175A563260049684CE522616831A063469579E15B2AEFA8D6B758F08
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSMwktzNsI9pCB4hIFDSpU-fYSBQ38-kAtEgUNkDmENxIFDYEZQukSBQ0wTdVhEgUNM2nwEg==?alt=proto
Preview:	CjYKBw0qVPn2GgAKBw38+kAtGgAKBw2QOYQ3GgAKBw2BGULpGgAKBw0wTdVhGgAKBw0zafASGgA=

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	32499
Entropy (8bit):	7.942507096814788
Encrypted:	false
SSDEEP:	768:meo67NkMRrNqTMIX31B2VSwTz/SkoQby+em+CCQX:mevBkMtNU1OzZO+ex2X
MD5:	038A4850F303D22D40D70513A97286C3
SHA1:	807C185EEB16151482C45E2A66DF41E194FEEEB0
SHA-256:	CB82E6CAF510B90F7FCD30F5E5042B84DF02DBABEB38A8EB9F1D6E030541B0FD
SHA-512:	CBC5C6E1C38A983F9D987B8EC8B39437C1AE38CA3A4F3AE2408CC53D8C850802AFA4950FD978321AAC5D2490C1F02102410D5B168966966B5BB82C12B1433393
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......Exif..MM.*.............................V...........^.(.......................i.........f.......`.......`..............0231....................0100.....................@........................http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">CK offer cover - 1</rdf:li>......</rdf:Alt>.....</dc:title>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:Attrib="http://ns.attribution.com/ads/1.0/">.....<Attrib:Ads>......<rdf:Seq>.......<rdf:li rdf:parseType="Resource">........<Attrib:Created>2024-09-12</Attrib:Created>........<Attrib:ExtId>1d09c9d9-ebef-4e03-b75e-ca5b0ce3206c</Attrib:ExtId>........<Attrib:FbId>525265914179580</Attrib:FbId>........<Attrib:TouchType>2</Attrib:TouchType>.......</rdf:li>......</rdf:Seq>.....</Attrib:Ads>

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16661
Entropy (8bit):	6.935994832435693
Encrypted:	false
SSDEEP:	192:3knjxDL8ZuwE3FV1JK2KBMZFSfOVjgjBNuPnQhOeM8xL7qiW3oKSBo+JPyAFBAat:0niZuwE3JcawBdbeXmCOVCt7Po
MD5:	95F8218EF9945B9BF8017D8B6C554DA1
SHA1:	A80CF3D25E21111E6897A4A6F60AC06F33600ECB
SHA-256:	2B778DC08436DC9C91B0F56B5F8C34D0B2F24B3CDF2EA76DE050E2474A1DEC5D
SHA-512:	128055D7ECD1B9E097F57EBED24A40BABA3BBB2185FA5A49A363D2DED84FE3D99BA8F729425CE36D9D22C87824F469E62E833C2E646A81F55BAE2D9AA9A8D69C
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HP.png
Preview:	.PNG........IHDR.......d.....N.8_....sRGB.........gAMA......a.....pHYs..........+....'.iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmpTPg="http://ns.adobe.com/xap/1.0/t/pg/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" dc:format="image/png" xmp:CreatorTool="Adobe Illustrator CC 22.1 (Macintosh)" xmp:CreateDate="2018-05-04T19:03:53+08:00" xmp:

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=14, height=4480, bps=0, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS R, orientation=upper-left, width=6720], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	44367
Entropy (8bit):	7.527506062748917
Encrypted:	false
SSDEEP:	768:3NGiRGBLn3vLpWIyiiPdweAeWFFJkjsrN+NdQ8g8RoBFKscX:31GBT3VLQdMe0+AQfohO
MD5:	A18306CAE921E03F5FFE96462E63B8F2
SHA1:	B944E770F1332AC7489B980599D80CBC4F20C5E4
SHA-256:	43DB78D37843726FAD41AB0ECF63C0A45C39B3E04F3B6E0A1C0D51127EEDFBCA
SHA-512:	6D6E36F7B7B7DEB89E25817CF78805FB6E48C683F9BC6EBD9AA523261D4B07FE60B4AE4E9BCCCF06A5F78E1A1B7B32A6ED6A4D2772D1D1340BE7549725485C09
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/RGH.jpg
Preview:	......JFIF.............jExif..MM.*...............@...............................................................................................................(...........1...........2...........i.............X......Canon.Canon EOS R..$....'..$....'.Adobe Photoshop CS5.1 Windows.2019:10:02 17:14:52.. ........................."...........'...........0...........2.................0231..............................................................................................................61..........61..........................................................................................................................1...........2...........4.........4.5.........J....................2018:07:30 11:39:44.2018:07:30 11:39:44...+...B@.i....B@..........................UU......UU....068022003208.............#....................EF16-35mm f/4L IS USM.0000000000...........................................(.........................................H.......H.........C..............

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fwww.harbour-plaza.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 336 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18093
Entropy (8bit):	7.977452501447703
Encrypted:	false
SSDEEP:	384:TRbzvyJSM3DujeuXe3qQbsqCVxYhIcxunutTy8itjNR4ltUAXJ1jWRVvn5:TVyVgNsnhIcCuxgfCfUADjWD5
MD5:	F74590ADD6B0E28C260D86517F3ACC57
SHA1:	01FD678FCAC0479614D2C83E66509AF2A678D22F
SHA-256:	2EE1A1ED9E3C7F6493152F903A304AF4725CCB012F83E3ED69EB4D9D3E7EA008
SHA-512:	FE639AD201F3713AD4EF75AFD5EF18AC59D23BACFA83B0205BE7F5FAC0677E88092BDB578B274084CF005BA8AD2B5DB206C4B0B1E45498306809856CC243D0A5
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HALEX.png
Preview:	.PNG........IHDR...P...d......th.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....pHYs..........+......bKGD.......C......zTXtdate:create....3202.54.50.1..24.2..60.20..A......l....zTXtdate:modify....3202.54.50.1..24.2..60.20..A.....h...."zTXtSoftware....sL.OJU..MLO.JML.../...zB...EoIDATx^..@Ug...." .....`....5k..t.7..1.9g..F..A..AT.L.E....}.{........s....>..J.@FFFF&.H...\|U$DD.......DF...5P....'lq...H.x...h.u8.Rm.Iked..Y.......o......D.......<...22.....\|..&'..O?..CP)...UU.$&.W.'T..-ed..Y....I...c.ax.q.T....LMIAjb",....O...,@e.hb..q..p.;.A.XQ.q&....X.......-ed.....b.....-."%!...(........Eh............L.#k.2_$!....m..>.I&{.`<~8b..................'.:d.4..N.T...:...f..8^...uj....ed>....E.p..x....}=.wjU(.6..Xxz.Y...X.-.m-#.a......i.qk.B...@JB".+....i.V..........[1.....O..\|Xd.^..}.l<.q.jz...T...Z......dX......h.l-}BF..#k.2.=.:}.g.....".....^.....H.OD].}..\|Ld.*.......6..r...ZZH..GQ3..w>...:...]....~....LF.c!..2.%...3.....0..c.U..m...pi..&..k

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587), with CRLF line terminators
Category:	downloaded
Size (bytes):	40864
Entropy (8bit):	5.285942087668908
Encrypted:	false
SSDEEP:	384:ofpkOWjh7BMU4jOpFx/gUL0NVvtD0WWtMfDke1PeLDDV6keqAeaIKcM/YvVa6oN8:of7A1u94WWtWDkoovAp3cMF8
MD5:	7865FA212BEC89BD506B882F7C073208
SHA1:	45A92D56F6C3D97528045FE624DE97AABFB9EC8E
SHA-256:	475408107D91330F56A50765B008CAB9489D73DDDDF54CE5025A95EBA8CD2AD2
SHA-512:	D37A2ECFECEECAD909E00348AB25FD11D55302909D6209359930DBBEB11E665F635573C8BF863B22E8A32243B188017A74B9E6FA24BA6DCF2E94BE876E6D774C
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/css/components.css?v=d37a2ecfeceecad909e00348ab25fd11d55302909d6209359930dbbeb11e665f635573c8bf863b22e8a32243b188017a74b9e6fa24ba6dcf2e94be876e6d774c
Preview:	@font-face {.. font-family: 'webflow-icons';.. src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQTFw3HAAAEnAAAADZoaGVhCXYFgQAABNQAAAAkaG10eCe4A1oAAAT4AAAAMGxvY2EDtALGAAAFKAAAABptYXhwABAAPgAABUQAAAAgbmFtZSoCsMsAAAVkAAABznBvc3QAAwAAAAAHNAAAACAAAwP4AZAABQAAApkCzAAAAI8CmQLMAAAB6wAzAQkAAAAAAAAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAABAAADpAwPA/8AAQAPAAEAAAAABAAAAAAAAAAAAAAAgAAAAAAADAAAAAwAAABwAAQADAAAAHAADAAEAAAAcAAQAQAAAAAwACAACAAQAAQAg5gPpA//9//8AAAAAACDmAOkA//3//wAB/+MaBBcIAAMAAQAAAAAAAAAAAAAAAAABAAH//wAPAAEAAAAAAAAAAAACAAA3OQEAAAAAAQAAAAAAAAAAAAIAADc5AQAAAAABAAAAAAAAAAAAAgAANzkBAAAAAAEBIAAAAyADgAAFAAAJAQcJARcDIP5AQAGA/oBAAcABwED+gP6AQAABAOAAAALgA4AABQAAEwEXCQEH4AHAQP6AAYBAAcABwED+gP6AQAAAAwDAAOADQALAAA8AHwAvAAABISIGHQEUFjMhMjY9ATQmByEiBh0BFBYzITI2PQE0JgchIgYdARQWMyEyNj0BNCYDIP3ADRMTDQJADRMTDf3ADRMTDQJADRMTDf3ADRMTDQJADRMTAsATDSANExMNIA0TwBMNIA0TEw0gDRPAEw0gDRMTDSANEwAAAAABAJ0A

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	249331
Entropy (8bit):	5.548813617737381
Encrypted:	false
SSDEEP:	3072:LawiztGbETratory035CptDY8/I8+yr/OUYhcDmKD0C8Gp/mXG:SGbg+toTM/GUTx0C8Gp/mW
MD5:	683C7BA22149AB32D28F14843A445966
SHA1:	EEE15FAD5C683F0D3B877240024C50272AD2276A
SHA-256:	6A3E84F4EA09F29A4AFC8A3CA43B3424190B7ED623058EEDDA8B2D54E09EB3FB
SHA-512:	1BE4624C92156D1D83A7F73818104F360193936092E48413C5240FCCD0E9431EEEE74B0368BE4AC293F80F151336433E0EC8965BD0DB09E830129C6B4EFFD16A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	4.651836725216016
Encrypted:	false
SSDEEP:	3:PouV7uJLzLKvYk2FF/iCsaHVk+H2NlZK3tvxL//Q4NGL:hxuJLzLiYkiPt1cZkdx84QL
MD5:	0348096AE10F55CAC9AF34DACAA76BB7
SHA1:	109138DC89FF7BEE0C14F606D079222B6067797C
SHA-256:	18AC5C1003B8462FEE3E5E1470DB7EBFA2BCE0FC0753D78D828FDDEFCA659386
SHA-512:	F0369C82F5D5DAAF5CE884557CC0C3D5A9D9198E8797C9FC7A1574B8814C67BED5E8B707AAF6A566751D642B220C553D79E44154ABE82259A0D8C471617C4D77
Malicious:	false
Reputation:	low
URL:	https://b.triptease.io/?apikey=undefined&bucket=1&conversion=false&clicked=false&searched=false&tripteaseUserId=01JBDN53MAA2AVVJ5V9N047DPE
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">. <meta name="robots" content="noindex, nofollow">.</head>.<body>. .</body>.</html>.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
Category:	downloaded
Size (bytes):	23040
Entropy (8bit):	7.990788476764561
Encrypted:	true
SSDEEP:	384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD
MD5:	DE69CF9E514DF447D1B0BB16F49D2457
SHA1:	2AC78601179C3A63BA3F3F3081556B12DDCAF655
SHA-256:	C447DD7677B419DB7B21DBDFC6277C7816A913FFDA76FD2E52702DF538DE0E49
SHA-512:	4AEBB7E54D88827D4A02808F04901C0D09B756C518202B056A6C0F664948F5585221D16967F546E064187C6545ACEF15D59B68D0A7A59897BD899D3E9DDA37B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
Preview:	wOF2......Z........8..Y...........................B.p.`..D....e.....d.....B..6.$..v. .....E.K...5l\e.v.~S$}.".8.....5.E....s...ai`W.u..8a2C..JuBj....x.....%.u.C.......p..c...7...+.1.GS.3...F_....-..`#........]...T.....x....&..{.....V..,..&~$D.#.P..\|gzz...B.7..m.3....HH.l.....Dj.F.X.....U..+.Q...T.`...ST...1...0....io`zu@.J2....3]}0.X...,..+"...............(k.CGl......`.y.._....3.t!O.,X:t.3....lw..U../:..b.]....V.$.y....G.....H..IN....bQ.+ \@....;...C3...c.l..i/....#..I.).Y...]...s..$K!..Tr...g%\|r.D.#.Y{..R..We...X.?...r.@...G.{..>..4^..b..,.z........T..[.ru#.7..{..G....J.3......Lz.C].of$Y2..^...>@L..P.........7..bB.....6f...ec.i..{._\...A.I.Lcy.Qm".....k.^.d.K(x7U...c.o.......}.T......iL..!.Z.......[O...%...*'?........^I./..;t.4%.....S...4....wY.b9.%.b...,.....tC..9.Z...V..CHnA.S.-.u$m.\....7{,..K{(.."....._...\|{.VowE@E@@..Zg.....`8..b..Z...^....l+...R..%.L.b...._..E.j9\+.L.#J.........?&...&..scE..b..Jc.8...V....L 1./k.3..7w....x..-.....

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4113
Entropy (8bit):	7.80289819844934
Encrypted:	false
SSDEEP:	96:76425jmIpChIamHSDsYbC4L0xCp+WzfeXwmqPnu0uTa:760Ux3yDsYb8x4zfeYx
MD5:	4734AFCB78D9924C650A4DAB2E272242
SHA1:	F469ABD9A4EBBE3649C00DC6FF95DA5C3B6AA9BC
SHA-256:	6F0AA78192ECE0F634A47774A370E2687529ED87849572472AD85096029A1F9D
SHA-512:	2B8C5BD6AD8FDBC6AEAFA5F82DCBCF9B7F9C209F5B3E9A4F0E687902087A3DC70141A78DB0F0183DB46B59ECB2D31641D2292D8D1A0E0C664340C7C9996086DA
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/hotel_brands/2/31d91a76-9bd7-4e36-b5a8-21bb59ce4410.png
Preview:	.PNG........IHDR...b...L.......bH....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:4129547DF3D611EA93298346D5121DD3" xmpMM:DocumentID="xmp.did:4129547EF3D611EA93298346D5121DD3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4129547BF3D611EA93298346D5121DD3" stRef:documentID="xmp.did:4129547CF3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.8g.....IDATx..].p..........c..T..B+.*....`..RP.j...b[.B...((.....h..a\|........J.CA..A..H..(&.H./.m9..{............

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39394), with no line terminators
Category:	downloaded
Size (bytes):	39394
Entropy (8bit):	5.298955006107002
Encrypted:	false
SSDEEP:	768:VCSQzlfBwZ4LLT8Sc7vtdz8SW+t8yQxEugughR7nIwd7rUzNA:HQzlKZjz8etUoughRswd7rUzu
MD5:	9F82507B1D6096DC3F5AB31124471E6B
SHA1:	4FF203B41B3CEDD3D6D0ED3EC30D3C94F175481C
SHA-256:	20D79F60A4C87E7063520A07FF8FF15FDC10654E803D91229940253A6B6152A8
SHA-512:	B8B1BA8214F8517087A7350780A2900D115BC9FEDD9AB09F9D5FEF3E2FFEED69998A80F8E7687210D6ED4257C59623A5B5998EA870F7E1EA65AB9DBC021D8EBA
Malicious:	false
Reputation:	low
URL:	https://static-meta.triptease.io/client/main.js
Preview:	(()=>{var t={4849:t=>{t.exports=function(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n},t.exports.__esModule=!0,t.exports.default=t.exports},9168:(t,e,r)=>{var n=r(4849);t.exports=function(t){if(Array.isArray(t))return n(t)},t.exports.__esModule=!0,t.exports.default=t.exports},3564:(t,e,r)=>{var n=r(4928);function o(t,e,r,o,i,a,c){try{var u=t[a](c),s=u.value}catch(t){return void r(t)}u.done?e(s):n.resolve(s).then(o,i)}t.exports=function(t){return function(){var e=this,r=arguments;return new n((function(n,i){var a=t.apply(e,r);function c(t){o(a,n,i,c,u,"next",t)}function u(t){o(a,n,i,c,u,"throw",t)}c(void 0)}))}},t.exports.__esModule=!0,t.exports.default=t.exports},7837:t=>{t.exports=function(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t},t.exports.__esModule=!0,t.exports.default=t.exports},8424:t=>{t.exports=function(t){return t&&t.__esModule?t:{default:t}},t.exports.__esModu

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/945566240?random=1730256463759&cv=11&fst=1730256463759&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z8849071394za201zb849071394&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&hn=www.googleadservices.com&frm=0&tiba=CK%20Group%20Staff%20Offer&npa=0&pscdl=noapi&auid=271674906.1730256461&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	107764
Entropy (8bit):	5.342181332194727
Encrypted:	false
SSDEEP:	1536:35oq09/TEszfw3a/C3g7AJKtw6+KdztUvcu1sSGzwF6wl6NyLWot6otFO4iUzu9M:JoD5TEszf3/H7ExNmmzu9pT++G
MD5:	00A0463A5819562BF10192458847896B
SHA1:	5E52ADE0E54EF84B85D807BF4BD9CE97FC895A78
SHA-256:	A711D20BAA06A759989FF862C9C4812A7B25C111BABD9056116EEFC25CAAC567
SHA-512:	7404608181FE022C5DE302C264141461A1A70800FB1C0B8EB6266CE4DC76077CE2FCF35F2C4E346B0330C960788A06AEC39AC9D70BD501C4F94805265A5AAE40
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/integrations/v8513.120578/synxis-price-match.js
Preview:	(()=>{var Fo=Object.create;var jt=Object.defineProperty;var Ks=Object.getOwnPropertyDescriptor;var No=Object.getOwnPropertyNames;var Lo=Object.getPrototypeOf,$o=Object.prototype.hasOwnProperty;var Uo=r=>jt(r,"__esModule",{value:!0}),a=(r,e)=>jt(r,"name",{value:e,configurable:!0});var d=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports);var Bo=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let n of No(e))!$o.call(r,n)&&n!=="default"&&jt(r,n,{get:()=>e[n],enumerable:!(t=Ks(e,n))\|\|t.enumerable});return r},F=r=>Bo(Uo(jt(r!=null?Fo(Lo(r)):{},"default",r&&r.__esModule&&"default"in r?{get:()=>r.default,enumerable:!0}:{value:r,enumerable:!0})),r),Ft=(r,e,t,n)=>{for(var s=n>1?void 0:n?Ks(e,t):e,i=r.length-1,o;i>=0;i--)(o=r[i])&&(s=(n?o(e,t,s):o(s))\|\|s);return n&&s&&jt(e,t,s),s};var ce=(r,e,t)=>new Promise((n,s)=>{var i=u=>{try{c(t.next(u))}catch(l){s(l)}},o=u=>{try{c(t.throw(u))}catch(l){s(l)}},c=u=>u.done?n(u.value):Promise.resolve(u.value).then(i,o);c((t=t.apply(r,e)).next(

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	40445
Entropy (8bit):	7.9538812900734035
Encrypted:	false
SSDEEP:	768:wCxRWb79YmGpqLvD7Ot13mIU0z29SUUipQcqNitKB:wCab7qpqi1ZU0zCtpQcmitS
MD5:	DD66787B82FF78AED9D5567DB406FC7A
SHA1:	FE7B0D99D4B4BC23540E2A485A9BC192EC4CE6F7
SHA-256:	B45A6FF22DA706E46B2F8DFAAF977CA9343B5534BCD9E319123EFDBBC0F6B06E
SHA-512:	0972DB0FA35F352914BC441F1ADA769FD5AC0D3958109E0BC0D62784FDCFF09B9FCDDBE5D13052FC7DFC9D3FD554E1215A74DCCDF0093BF3ED5F77FAC1443842
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/KLNH.jpg
Preview:	......JFIF.....`.`......Exif..MM.*.............................V...........^.(.......................i.........f.......`.......`..............0231...................;............0100.....................@..................ASCII...xr:d:DAF9fCB0WlI:3,j:3615684050494718485,t:24022204.......http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Untitled design - 1</rdf:li>......</rdf:Alt>.....</dc:title>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:Attrib="http://ns.attribution.com/ads/1.0/">.....<Attrib:Ads>......<rdf:Seq>.......<rdf:li rdf:parseType="Resource">........<Attrib:Created>2024-02-22</Attrib:Created>........<Attrib:ExtId>44371550-b2f5-4607-8530-289893fef441</Attrib:ExtId>........<Attrib:FbId>525265914179580</Attrib:FbId>........<Attrib:TouchTy

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (357), with CRLF line terminators
Category:	dropped
Size (bytes):	573427
Entropy (8bit):	5.232604095139064
Encrypted:	false
SSDEEP:	6144:raxs2mFI6L7D1cwa7huTfcfs3G+Nh8GBLf:raxsHFhq9+fcfs3GaNBLf
MD5:	36B40554030FC0D417B8B045929BFF22
SHA1:	AF77A0B76462EE1A9D2DAF6033F6102706FDCA84
SHA-256:	BDC8E725D74945D4E3BE56B6BD5E405455BEFF5A68AFDDB0EBB9311CF276E6D5
SHA-512:	63C898E7A1C43E391F18724E7CD8B0E0D236BC5AA25CC5BC1FA509562A584E616A39CB1DBE896C7F8A69FAFDD3A1BFB54934AEC098A1640AD9C7E6FE50D1F4BF
Malicious:	false
Reputation:	low
Preview:	/!.. Webflow: Front-end site library.. * @license MIT.. * Inline scripts may access the api using an async handler:.. * var Webflow = Webflow \|\| [];.. * Webflow.push(readyFunction);.. /../***/ (function(modules) { // webpackBootstrap../**/ .// The module cache../**/ .var installedModules = {};../**/../**/ .// The require function../**/ .function __webpack_require__(moduleId) {../**/../**/ ..// Check if module is in cache../**/ ..if(installedModules[moduleId]) {../**/ ...return installedModules[moduleId].exports;../**/ ..}../**/ ..// Create a new module (and put it into the cache)../**/ ..var module = installedModules[moduleId] = {../**/ ...i: moduleId,../**/ ...l: false,../**/ ...exports: {}../**/ ..};../**/../**/ ..// Execute the module function../**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);../**/../**/ ..// Flag the module as loaded../****/ ..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24448, version 1.0
Category:	downloaded
Size (bytes):	24448
Entropy (8bit):	7.99088597353699
Encrypted:	true
SSDEEP:	384:9BNdyPCV6NIidqJh7Pc7qK10yJ/smPzyL6AdcEoJwDvVa7U03NymBtpxev7++/9H:bKCV6NiWuKdJ/smby+ZJSvsU0dnE7/Qg
MD5:	865E46AF816320C9F32234E8968558D0
SHA1:	6791E9F732FCBDE0F375F84CCBC14C4AC72795A3
SHA-256:	6C84348296EBE2E2A0830C3962EB02156419D9BC76371C2EADAF7329D827D550
SHA-512:	34EB9CB9C4DCA6E0CA7FA1C9379E49AF97E9CCB7C94A6A4B9CCD4D6EA62007B70A4792463902BAE705177CCAA46DA883C06911074BC13C6DD403C4EB18965074
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2
Preview:	wOF2......_........(.._"..........................H.p.`..D....e...........B..6.$..v. ..6..E.K.G.%l\e.v@..}5.a.G-:....T.fZ.....d..v..V.. b.$..BM8J.....Z..k$..`..?..3..&Q..yO...k.GG./.G.ql.E.....~....o.}.^.k&o.M.O...[..'.4.A.p....u...E`.bG........}NU....G.V..L.#.R!...f.M......9jlc...Qc.:.....T............F5.?o.:..k.Z.W...!.h...^.....t..7..Ns.9...a.xC...7,.....^...a:...QI..Gj6sF..T.P'xq....C.K.pz.@v..)LVQ..h..v..uV{@.e8...{.5...yG..x....n.6.!...m..@.'. ...Q.v.\6.[..f.....s.?.sL..E...2.>b.CG...>b..Yr.......m....8/D..n{..8..[.....V...>.h.t....!./v...h..`E..y.I..~.H...,[.w..^....jg.w...:.....a..j{.....Q...G..K^......t...[.......zNc5BV....T......N$.][r.6Jr..`..u...'..~.7..7b...0I ....$8.@M.F7.F EQ.NH........R.g.8.SH.=.p..u....?.....&......r.g......\|............^......PR....#ug.6.F..>..K;...Q..Z..Y....jB ......"s.w.ei3@..8....HW.......%....DDD.G.......eo(%K... ....a:..dH...UJ...........J..lC.~.}.......R.......E.vbe[<f....*...z...>iP9o......j).

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 167, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	122913
Entropy (8bit):	7.989901785386632
Encrypted:	false
SSDEEP:	1536:xUTIiMyXcSYZfvbNhIuXBO8ixlOtjZChSqg/NPzRh62Y3AcI5DVcGQ+AXSOlPJzw:mIiM7BNXIJIjZxq0NjuwcwDmGsCVtX
MD5:	E2C5754B89EFCEEEEF2136921836FC00
SHA1:	628A5000DA6CD1A84B689CAEABE45149141B4004
SHA-256:	75C2E22CA007D72E4D0A25D05A6974CFD9D51405328F704607CC9C7AE95A7921
SHA-512:	8E79F8B837EA43705A583D1190449E00A8FB70239F55B67B87D377F85E168C10294EDF718FDFC7A33FD585C234D012A87E3545B35A7D92F4E680A25DE3CA50E9
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HPRC.png
Preview:	.PNG........IHDR...@.........`..$....sRGB.........gAMA......a.....pHYs..........+.....;tEXtComment.xr:d:DAF9Y_bfYb0:2,j:1208509939341979441,t:24022103.......iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>..... - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-02-21</Attrib:Created>. <Attrib:ExtId>30abef82-ad30-4073-bd65-abe9a76d5ba8</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	31275
Entropy (8bit):	4.891714966865526
Encrypted:	false
SSDEEP:	384:zzZeBDjxOff6/+W1wnpTwhy6PDcYnVH7vAB7GBARHpxm0:zFgpOff6/+W1wnOhySVH7vAB7GBAN
MD5:	55AD22DCA240E95EC64F9B4679D9C466
SHA1:	0F28A5EE98C17B7FAFDF99A488006B917E5CAA72
SHA-256:	077A8130D1F03DEF0B766226EE0267E2106880832E5765A4D71B12C7A86E809C
SHA-512:	700F9591D6D25A13F73A115A64B7A34EE9FEAC0930587D78FA1080BD6562EF34245AAC4C416539F236A81806E907F71EFD552F733AB661065F0A5C44C411EB68
Malicious:	false
Reputation:	low
Preview:	var screenWidth =.. window.innerWidth \|\|.. document.documentElement.clientWidth \|\|.. document.body.clientWidth,.. screenScrollTop = $(window).scrollTop(),.. lightBoxCanChange = true;....var windowHref = window.location.href..var isShangHai = (windowHref.indexOf("metropolitan-shanghai") != -1 \|\| windowHref.indexOf("metropolitan-residence") != -1)..$("body").addClass("is-shang-hai")....var googleMapStyling = [.. { elementType: "geometry", stylers: [{ color: "#f5f5f5" }] },.. { elementType: "labels.icon", stylers: [{ visibility: "off" }] },.. { elementType: "labels.text.fill", stylers: [{ color: "#616161" }] },.. { elementType: "labels.text.stroke", stylers: [{ color: "#f5f5f5" }] },.. {.. featureType: "administrative.land_parcel",.. elementType: "labels.text.fill",.. stylers: [{ color: "#bdbdbd" }],.. },.. {.. featureType: "poi",.. elementType: "geometry",.. stylers: [{ color: "#eeeeee" }],.. },.. {..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48011)
Category:	downloaded
Size (bytes):	63095
Entropy (8bit):	5.223291199465111
Encrypted:	false
SSDEEP:	1536:mIDRf/14H0xpnfj06NXhKfUDesVMtoUvzIRgCOjm74CKojdGHa:mIDRXCH0xdLNXcfcesVmoUvzIRgCOjmb
MD5:	27F4CD132813805F719B6E908F067165
SHA1:	F3F51DE213ACBC39334B81E3EA152685565F4AFF
SHA-256:	58431199CC46040BA165E634401EC05ADBA9F7A9BD94236DDA94150258F14290
SHA-512:	F132BF655B2259C06F8282288DC0810463788FB13A5C800F74F4B7DC6535E557AA9B05E76B7C05D3A5C50844A04B6B337AA9A20A742F4EC95C7A5661DC798721
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/kernel/v8513.120578/kernel-host.html?originHost=www.harbour-plaza.com
Preview:	<script type="text/javascript">//<![CDATA[.(()=>{var Fi=Object.create;var Ie=Object.defineProperty,Gi=Object.defineProperties,kr=Object.getOwnPropertyDescriptor,Wi=Object.getOwnPropertyDescriptors,Ui=Object.getOwnPropertyNames,Ve=Object.getOwnPropertySymbols,Vi=Object.getPrototypeOf,It=Object.prototype.hasOwnProperty,Cr=Object.prototype.propertyIsEnumerable;var Rr=(r,e,t)=>e in r?Ie(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t,I=(r,e)=>{for(var t in e\|\|(e={}))It.call(e,t)&&Rr(r,t,e[t]);if(Ve)for(var t of Ve(e))Cr.call(e,t)&&Rr(r,t,e[t]);return r},ke=(r,e)=>Gi(r,Wi(e)),zi=r=>Ie(r,"__esModule",{value:!0});var Mr=(r,e)=>{var t={};for(var n in r)It.call(r,n)&&e.indexOf(n)<0&&(t[n]=r[n]);if(r!=null&&Ve)for(var n of Ve(r))e.indexOf(n)<0&&Cr.call(r,n)&&(t[n]=r[n]);return t};var y=(r,e)=>()=>(e\|\|r((e={exports:{}}).exports,e),e.exports);var Bi=(r,e,t)=>{if(e&&typeof e=="object"\|\|typeof e=="function")for(let n of Ui(e))!It.call(r,n)&&n!=="default"&&Ie(r,n,{get:()=>e[n],enumera

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17728, version 1.0
Category:	downloaded
Size (bytes):	17728
Entropy (8bit):	7.987337206626857
Encrypted:	false
SSDEEP:	384:/KaOBBleprMP1pjz5XxsCKqT3+m6qmTuk52+CL:vEBlepr8Hjz5BDKqTum6XTuu2h
MD5:	9D09D1DF90538B11770EC5F593B6D792
SHA1:	6E117EEEDA54F443063BECF094332B362E19ABB8
SHA-256:	A961366B4346F6078CC2F164D2C019F63B37E2693F6FC93A995048A98B25C083
SHA-512:	C6F4F73DF5B0C9A5A2DBED0D822F99D82E82B01AA92365F17B4F15B169DC70EF6101DC694D60179039FE44AD6A7FF6C99E396EC51E6E589A4EBF0257BAE479A2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2
Preview:	wOF2......E@..........D...........................H.p.`..`..D....s.....h..M..B..6.$..v. ..$..E.r.l..c.E38..../_y6.f.......6...t...3.....l.W..,LVIDU..F...hj,W.v7.]....:.);K...LS......[y..=x..?.,...o.......=..D].2....../2..7......+<.=G....?9.....~w.8.g.#:w......S./n...L.I...lS.....F....").H.R"....3'..r.ns}....W....W.H......Of.,.P=(.4p<..0...;..w...n4..4. .+.P!.sI_.7L..U.....6FnT.GF....&...P.'JJwl..C.!..)..Y.N..h...`!>.@..~..=...p..<D.C...1D.Bv.&..5.]..7.....mjma..%.Fv.;v.i.(....%......*].aB...........y.......$.2..KpWl......[b_d!mw...b0vc.?C.....66..B.`.....oJ..J....L.WwE.D......j...vc..RHw...,.@..79.p..<.u4=aE.._..EYQ...<\=.=..?..$......;.f..}....e+O............O,.T_[.=..N.r.....TcF].......CHt..[H....r......K]..<.....$...V. ""....;_@M..Mc..S.k........A.YG....2fV......D.!.....D.8M$f.-.. ....j...`. ..Z....>...L.):.W..eo.>>Dm..>..h....>%JE\|..d%....k&..C...h+8.F$.CK..6%2o.&.2.....KS.Y...W....a....7k.0..+.`"-...w...].En....`.B...e....UE....,..'N....A...G@D.,E

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13398
Entropy (8bit):	7.861055645881549
Encrypted:	false
SSDEEP:	384:EqYoFcSciQ5ZVEk5ec5cuES3FpROpqnIF4:EqYoqB5xH5CmRTnIF4
MD5:	036224E3F7EEF5D3E8A9DD1B2B82D1B6
SHA1:	85225FC80C2438D6A95593A18BDA9191DDFA1ECE
SHA-256:	97AA056EA9C4DC3729FCC320B62EB2C33DC401271AA1EA2A30DE56652E1877AD
SHA-512:	26E99503D44AD9C05066F82CE7F006EAC1F08F99C1E2C3A35809BA230BBBA7FF0A7A4B063A30163895E2A809B525D583E9CE3D8FEC9591D1E42F13B7EBABB26E
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/website/9/5e0d1617-e33e-4602-9a72-77c72342a239.png
Preview:	.PNG........IHDR.......,.....PV......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C532BF93EF8911EAAEE6853A279006E5" xmpMM:DocumentID="xmp.did:56FB32BC24E911EB8DA0D67EE4388C27" xmpMM:InstanceID="xmp.iid:56FB32BB24E911EB8DA0D67EE4388C27" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f27a2984-7fb3-8348-8bb0-70bda3b8daf1" stRef:documentID="adobe:docid:photoshop:5612b58b-f661-0742-a76b-9b7467962214"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..?..0mIDATx........R..b

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	104776
Entropy (8bit):	4.769024311260266
Encrypted:	false
SSDEEP:	1536:Hqekp/0n1j5s1VU7RgvTek6qXDNo8WW5ZOHST8GZ7WliwNOt:Qp85sJi08BI
MD5:	C852E6AF15D5F65D2431CC9C3BE64E8C
SHA1:	5E96A6A39755BF442D920147E6F56383FF373AD1
SHA-256:	B72A0D0FC95BCD6ACE7342371F9AE98BA296462BA9D9E12AB0F82B9585B52154
SHA-512:	CA0584777C36AB01FBD8B2CA9A8482995CAE36AE64FECA37D732DA937FCEA17D5DBDC09B6B68905C6EF3EB20CE7CB6C1DFB3A6B582802F6B2103624E668E04C1
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/css/harbour-plaza.css?v=ca0584777c36ab01fbd8b2ca9a8482995cae36ae64feca37d732da937fcea17d5dbdc09b6b68905c6ef3eb20ce7cb6c1dfb3a6b582802f6b2103624e668e04c1
Preview:	body {.. font-family: Lato, "Microsoft JhengHei", ....., ....., "..",.. "Arial", sans-serif !important;.. color: #555;.. font-size: 15px;.. line-height: 22px;..}....[lang="ja-jp"] body{.. font-family: '...... Pro W3',Hiragino Kaku Gothic Pro,"....",Meiryo,Osaka,'.. .....',MS PGothic,sans-serif !important;..}....a {.. color: #555;.. text-decoration: none;.. cursor: pointer;..}.....section_container {.. position: relative;.. width: 100%;.. padding-right: 50px;.. padding-left: 50px;..}.....section_container.home_4block {.. border-top: 1px solid #fff;.. background-image: url("../images/home_4block_bg1.jpg");.. background-position: 50% 50%;.. background-size: cover;.. color: #fff;..}.....section_container.home_4block.rambler {.. background-image: url("../images/home_4block_bg4.jpg");..}.....section_container.home_4block.alexandra {.. background-image: url("../images/home

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Windows), datetime=2024:02:21 16:48:52], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	53478
Entropy (8bit):	7.77219004894883
Encrypted:	false
SSDEEP:	1536:olxx8jPzERjTORvPSba2YMfa8G0V/Qcjtr:YxaXmCKb5YMy859Qep
MD5:	813AFA482439DFD1F22DB111113DC952
SHA1:	8F01E2B9FC7BE6538992559E0D5D0EA1DC76CCEC
SHA-256:	CFA3A8A007360E5122A6CE49077450EDF45BE141C6DD495743FEBD00C0960F49
SHA-512:	12A03AF1AC4467C01BCC22D2D52299524945314A35B4C96018A4935BCF69D2739A3C5F2FA06FB88363D05AE64CFE109F4B31E616DE8154991195E410F71611DF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM..............................b...........j.(...........1.........r.2...........i...............-....'..-....'.Adobe Photoshop 25.4 (Windows)..2024:02:21 16:48:52..........................@........................................... ...........(.(.....................0...................H.......H.........C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......T....!............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..79b=.. .A.t"....Gs..&.Q..\G..%\.+...#..h..U.B..I.T.` ..+

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 178 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4317
Entropy (8bit):	7.829265501983424
Encrypted:	false
SSDEEP:	96:+42YWpvEbnNsBEyV5OSmILL0lX90NxRz+H9jhi:+FsQESRLm9aZ+H7i
MD5:	6D9FE13078DE42F52E8F5E151EF7DF09
SHA1:	1D727457CED7C2CC0D35C4B76D5BEDDE8BE87947
SHA-256:	F0C3D338173507E2A9D18B09C02BD8F970D74142BBA7AFF23A060E86410424D0
SHA-512:	980FEF7A1D3A1C6FCFBBDDD758128C25B286C1A771CC3326D07B35A9D95BE06AF00808179C38C953C1F8F4475710DDC2099812D36025F7C58B9F73657513F414
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/hotel_brands/1/ed2969f7-6fc4-4cdb-8a85-042b829c78c3.png
Preview:	.PNG........IHDR.......L.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:41295479F3D611EA93298346D5121DD3" xmpMM:DocumentID="xmp.did:4129547AF3D611EA93298346D5121DD3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:41295477F3D611EA93298346D5121DD3" stRef:documentID="xmp.did:41295478F3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..u....NIDATx..]..UE...[1^.X.TRH....R.!.....f7"...E...ZR).@.......B.R.J.WAD^.!..)..T..s.......sxh..k.k..3..3....

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	99538
Entropy (8bit):	5.37168153829237
Encrypted:	false
SSDEEP:	1536:eMBMZIYzswHdj10l4V8QTNytRfJcPZsClYDAeambRnTZF6pupbDBImdImjqBpRvi:pMyYzLH51CkyHfiZ3GamFzlDBgPRvjW
MD5:	40A3BD9C77B2FF3A924475417E168832
SHA1:	C2706D317FC33FF27C52FC60E4255A744AA74222
SHA-256:	D61057C8D6AA11E1FF87DBECE528028BE432EF00A4DD77F28717DF923F2E836A
SHA-512:	60E541D226457465132B799D7B8BDB9EF6544314D9694397F32915018937AA8753704A2B23A1BB33A7E20A976A68346E324C67070EF542C0779DB8B264C85B04
Malicious:	false
Reputation:	low
Preview:	(()=>{function e(e){return e&&e.__esModule?e.default:e}var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:{},i={},a={},r=t.parcelRequire8d74;null==r&&((r=function(e){if(e in i)return i[e].exports;if(e in a){var t=a[e];delete a[e];var r={id:e,exports:{}};return i[e]=r,t.call(r.exports,r,r.exports),r.exports}var s=new Error("Cannot find module '"+e+"'");throw s.code="MODULE_NOT_FOUND",s}).register=function(e,t){a[e]=t},t.parcelRequire8d74=r),r.register("lxtR3",(function(e,t){var i=r("2t0No");function a(){var e;try{e=t.storage.debug}catch(e){}return!e&&void 0!==i&&"env"in i&&(e=void 0),e}(t=e.exports=r("crKfB")).log=function(){return"object"==typeof console&&console.log&&Function.prototype.apply.call(console.log,console,arguments)},t.formatArgs=function(e){var i=this.useColors;if(e[0]=(i?"%c":"")+this.namespace+(i?" %c":" ")+e[0]+(i?"%c ":" ")+"+"+t.humanize(this.diff),!i)return;var a="color: "+

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	33965
Entropy (8bit):	7.907864409510554
Encrypted:	false
SSDEEP:	768:aYXIbvJ91vYM4w9g2EZXSp0S4ef+dlnfma8VGSJCQj2nLI:aay1wM39ghSp0dNIgUNynk
MD5:	32CA0691EF608EA2D4227A506448BBEB
SHA1:	AE201428641AB7948A68EE847552AB629EF5FEAD
SHA-256:	D1418E79042917516A3D37358D7D3BBA8E9E18FBEE988EC33B2D62CB6186170B
SHA-512:	3A06F7A0BA9649DF6A8DD40AF0032143DB81B23764BC7FD931EF3F94823F754C47066F3D048E7D86EA80DAB43755084110C08E6839CF0F3C596572DF6225B332
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..I."..~..8.8.B.......M.Q../Q.Z.[.<. q....2M.~{.$WE..t...V.@..A...qH..'.Z..@...?..-.....:...J............1...]HG.~.&...9...q...9.....>.=.U...(.r..=j^-.v..Ee.....\H..#...#.......9..WS`./^x...O.....=X.s.....Kn../.@.....*.....z.>...}].b.O..D..-W#..w....}..pjx...6@..5...p..3..p9.....nO.n.I5.............z=.....im.#+....5:[eG...+\D....S.K.'.......s.Qt_.3....

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50418)
Category:	dropped
Size (bytes):	135036
Entropy (8bit):	5.238653514906717
Encrypted:	false
SSDEEP:	3072:Yj6SKvATyVhdGUUj9AUolF1j0iCO5C7Yh4+EVlQWEopgo/UuYWdQW+r/xvtrQCi1:SXWlF1giCO5C7Yh4+EVlQWE5otYWdQ3A
MD5:	99AF4C20044056D9D6E812E09E0BD1F0
SHA1:	9FBA583DB47E1D4FFEB349D92921D85A29B68E85
SHA-256:	853DC0F502CAFBE50350AB8503665E6A907C12585744D84E9AEBE3999C8ED537
SHA-512:	825ACF935F1A2B0C4503C798F7CB013CA99627D98926339FF39D002DBE8F86C0D8C6E0BDB8D65AF238897976C2018D316B179C8A07739295AD913D416D371C10
Malicious:	false
Reputation:	low
Preview:	(()=>{var ma=Object.create;var Xe=Object.defineProperty,ga=Object.defineProperties,ei=Object.getOwnPropertyDescriptor,ya=Object.getOwnPropertyDescriptors,ha=Object.getOwnPropertyNames,ti=Object.getOwnPropertySymbols,ba=Object.getPrototypeOf,ri=Object.prototype.hasOwnProperty,va=Object.prototype.propertyIsEnumerable,ni=Math.pow,ii=(t,e,r)=>e in t?Xe(t,e,{enumerable:!0,configurable:!0,writable:!0,value:r}):t[e]=r,w=(t,e)=>{for(var r in e\|\|(e={}))ri.call(e,r)&&ii(t,r,e[r]);if(ti)for(var r of ti(e))va.call(e,r)&&ii(t,r,e[r]);return t},H=(t,e)=>ga(t,ya(e)),xa=t=>Xe(t,"__esModule",{value:!0});var oi=(t=>typeof require!="undefined"?require:typeof Proxy!="undefined"?new Proxy(t,{get:(e,r)=>(typeof require!="undefined"?require:e)[r]}):t)(function(t){if(typeof require!="undefined")return require.apply(this,arguments);throw new Error('Dynamic require of "'+t+'" is not supported')});var S=(t,e)=>()=>(e\|\|t((e={exports:{}}).exports,e),e.exports);var wa=(t,e,r)=>{if(e&&typeof e=="object"\|\|typeof e=="

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2898
Entropy (8bit):	6.551690278459831
Encrypted:	false
SSDEEP:	48:SeLNn2yY8naJ3WtY5JWg2iMn/+7fXfwOfK2BUZU2MgaL3DvD92Ehznx:92t8nLtY5JWTn/OfXfFfbVvgaL3DvD9x
MD5:	2DE6DC9378E127C8F4721DF963E4DC23
SHA1:	A67EACCEA44B572813E81242F3788CB705EB930E
SHA-256:	B9BD0A08DA0E0C8D25C1B9399A49157961B0DDDCBBAD87529C9213502B5D878A
SHA-512:	621D83F0B1B81DCA2817CB4EEEC35AC5A3383C5C0F04070368523087417805B467B4A048A257CB4E9EF45E8AD63BA4020552FD3A8750E1D1DC9DD9F1C8F6EB45
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/images/weather-icon/60.png
Preview:	.PNG........IHDR...x...x.............tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.1 (Windows)" xmpMM:InstanceID="xmp.iid:72AF6E184D2111EC8FC4CE7359CEC427" xmpMM:DocumentID="xmp.did:72AF6E194D2111EC8FC4CE7359CEC427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:72AF6E164D2111EC8FC4CE7359CEC427" stRef:documentID="xmp.did:72AF6E174D2111EC8FC4CE7359CEC427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.m......PLTE...........................................................................................................

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 152 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5182
Entropy (8bit):	7.867409060514386
Encrypted:	false
SSDEEP:	96:264291tB7PVaHQNrOF8ZDRxRP7VnhaH+epa8wNUej2xps4pW4c:JbhOQNfDRxRBh3e4zUeyxpsyJc
MD5:	D4708B8742AF2753877A8977B5AA0F6A
SHA1:	331CB4B01D44B29DDF0E22F8020122A372CCB3CE
SHA-256:	EA14D3CC6434E4B67464111AE8CEB0B48FC79B1C6E2BE1070FB071D2F0DCDB6E
SHA-512:	2E6EBF86DC918DF8D3BABEE8CD50B9CDFAE9080BC0E464BF40B2E9A1F77A0877689D680CBEE4F8B480EF90BCBB7983085057E3DA8583EC76E992BFDCC63DE7A0
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/hotel_brands/3/e559066b-4a46-47a9-9864-4e24bb8f4e04.png
Preview:	.PNG........IHDR.......L......m~.....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:66265912F3D611EA93298346D5121DD3" xmpMM:DocumentID="xmp.did:66265913F3D611EA93298346D5121DD3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:66265910F3D611EA93298346D5121DD3" stRef:documentID="xmp.did:66265911F3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...4....IDATx..].....m.A#.8..Q ..$................Q@D....5.<F.#f..E6QQA......YdSBT...Aq...%.:....n.z.......n..^.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	18715
Entropy (8bit):	7.9294336068132205
Encrypted:	false
SSDEEP:	384:xtwbxmq6eKZSoGvULl48qSACcetbKedUa0HE2R1NStbbKdOOFVf160WE9mcbat9y:xtW0eHvRaAVlkMSbbKdR7f1R9N240a
MD5:	5986C0B36E4BAAEF0013C8A6FD054BAF
SHA1:	6A77AA6B3258B8230F4FBBBD97EE072C62125512
SHA-256:	D590741715480D1549A5F40442EDBB5D9A5FC1DB061C5510E35B12A33A5F852A
SHA-512:	7E0093AFE47730F2D1BA433A604CF69C63D6B8263C8152F06D991C6E3C012D2B485A0AF55E9E1A40630F69F1FF719D292B9556C9418AE57BF58CDE0AD109515A
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HPME9.jpg
Preview:	......JFIF..............Exif..II*...........................................(.......................i.......V.................0231....................0100....................@...................`.......`...........http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>Staff Offer_320x168 - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-09-03</Attrib:Created>. <Attrib:ExtId>0de40788-2845-47ec-9ff1-2c028bc52356</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	34
Entropy (8bit):	4.006436738245532
Encrypted:	false
SSDEEP:	3:YIWZ6W/4:YIk/4
MD5:	4B0DAA2E38B5D6FD84BB3B3648306453
SHA1:	649BEA752889C6E6DCE9EF26937AB5CBCE64B174
SHA-256:	19768D0A9A36A10B41536D15497DD6A5F8289DAD900EA45B5E20BD6D53D51327
SHA-512:	78446387A7FC4AA57C89E86C5F3B161ECAB9EE369AF46A957DF9C8A6377EF804A2EE322A7DE06EEDA58DA3B8917ADF2F6AB75429D324B50F92A44576294F399A
Malicious:	false
Reputation:	low
URL:	https://messages.guest-experience.triptease.io/01HCEXY419T8Y32C0RX4CXEKV0/messages?language=en-US
Preview:	{"messages":[],"notifications":{}}

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 57, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3117
Entropy (8bit):	7.714298965038531
Encrypted:	false
SSDEEP:	48:KBvnexJJ35vtWFEckcSRpiBuefJrkpda+LGWO8cN03+P1lNFbw:so1tWusfRkpd8Xt0OtlQ
MD5:	05661A8F11D7D9716C06089B0D66DD0B
SHA1:	67E922C41E34E4793FC8E21D67BC80D454650BD5
SHA-256:	58AF42610FAB2AC89285354E1FBCD6CB9B9E99E7E15A2C1C0A9A3CFF6E9DBAA6
SHA-512:	63003F360C54775650EA3C1B0E46ECD5AFC648BC08F36C9777CEA9A40A6323AE6310678BA5ED6F7C8A0BD208A7F297A15012761132D245FF58AB353C4A16B735
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/website/9/6a73eba7-9673-4d1d-a795-72c1dc3246cf.png
Preview:	.PNG........IHDR...B...9.............tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:B2853F6724E111EBA083F586F120279A" xmpMM:InstanceID="xmp.iid:B2853F6624E111EBA083F586F120279A" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:66265916F3D611EA93298346D5121DD3" stRef:documentID="xmp.did:66265917F3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..F....IDATx..[...S...].J.].+jsI.."..I.E..T.F..Rf..A.#S...F..T.lH...%.ju...T....z....8......o.j.w....;.........[.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	72782
Entropy (8bit):	5.032112740722689
Encrypted:	false
SSDEEP:	1536:Yb7Nxmu+D4XGoqnKdWAtbqPk4/e3dusaMGpFeeK3dE+:LMr
MD5:	4D0FB779AF150BEC4A75928B85B3C5C9
SHA1:	665522043CD827C042F81437B01AD111D1526389
SHA-256:	6C390E3E1ED5CB3941CB30454276A0C0D90B400FC27596D1D07DC14D5016FC33
SHA-512:	DF42682342AF4B30687BEB0BC1C68F96CD780F89414A036ED8C17DBE031FCD8004946C5CCEA0F2B36CCD7BFDD4BACEA3EDB59CDA81B4AFDEDFDBEEB3FDB91AB9
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/css/styles.css?v=df42682342af4b30687beb0bc1c68f96cd780f89414a036ed8c17dbe031fcd8004946c5ccea0f2b36ccd7bfdd4bacea3edb59cda81b4afdedfdbeeb3fdb91ab9
Preview:	button {.. background-color: transparent;..}....body.overflowHidden {.. overflow: hidden !important;..}....body:not(.header-dropdown) .for-dropdown {.. display: none;..}....body.header-dropdown .header_center_btn {.. color: #262626;..}....body.header-dropdown .section_container.header {.. background-color: #fff;.. box-shadow: 0 0 7px rgba(0, 0, 0, 0.2);..}....body.header-dropdown .header_logo_img {.. display: none;..}....body.header-dropdown .header_logo_img.for-dropdown {.. display: block;..}....body.header-dropdown .header_lang_dropdown_toggle {.. background-image: url(../images/header_lang_b.png);.. color: #111;..}....body.floating-header .section_container.header {.. transition: all 0.5s ease;.. position: fixed;.. animation-name: fadeInDown;.. animation-duration: 0.5s;.. padding-top: 0;.. background-color: #fff;.. box-shadow: 0 0 4px rgba(38, 38, 38, 0.1);..}....body.floating-header .section_container.header .hg_extra_header {.. display: none;..}....body.floating-

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 450 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13398
Entropy (8bit):	7.861055645881549
Encrypted:	false
SSDEEP:	384:EqYoFcSciQ5ZVEk5ec5cuES3FpROpqnIF4:EqYoqB5xH5CmRTnIF4
MD5:	036224E3F7EEF5D3E8A9DD1B2B82D1B6
SHA1:	85225FC80C2438D6A95593A18BDA9191DDFA1ECE
SHA-256:	97AA056EA9C4DC3729FCC320B62EB2C33DC401271AA1EA2A30DE56652E1877AD
SHA-512:	26E99503D44AD9C05066F82CE7F006EAC1F08F99C1E2C3A35809BA230BBBA7FF0A7A4B063A30163895E2A809B525D583E9CE3D8FEC9591D1E42F13B7EBABB26E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.....PV......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C532BF93EF8911EAAEE6853A279006E5" xmpMM:DocumentID="xmp.did:56FB32BC24E911EB8DA0D67EE4388C27" xmpMM:InstanceID="xmp.iid:56FB32BB24E911EB8DA0D67EE4388C27" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f27a2984-7fb3-8348-8bb0-70bda3b8daf1" stRef:documentID="adobe:docid:photoshop:5612b58b-f661-0742-a76b-9b7467962214"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..?..0mIDATx........R..b

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 336 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18093
Entropy (8bit):	7.977452501447703
Encrypted:	false
SSDEEP:	384:TRbzvyJSM3DujeuXe3qQbsqCVxYhIcxunutTy8itjNR4ltUAXJ1jWRVvn5:TVyVgNsnhIcCuxgfCfUADjWD5
MD5:	F74590ADD6B0E28C260D86517F3ACC57
SHA1:	01FD678FCAC0479614D2C83E66509AF2A678D22F
SHA-256:	2EE1A1ED9E3C7F6493152F903A304AF4725CCB012F83E3ED69EB4D9D3E7EA008
SHA-512:	FE639AD201F3713AD4EF75AFD5EF18AC59D23BACFA83B0205BE7F5FAC0677E88092BDB578B274084CF005BA8AD2B5DB206C4B0B1E45498306809856CC243D0A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...d......th.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....pHYs..........+......bKGD.......C......zTXtdate:create....3202.54.50.1..24.2..60.20..A......l....zTXtdate:modify....3202.54.50.1..24.2..60.20..A.....h...."zTXtSoftware....sL.OJU..MLO.JML.../...zB...EoIDATx^..@Ug...." .....`....5k..t.7..1.9g..F..A..AT.L.E....}.{........s....>..J.@FFFF&.H...\|U$DD.......DF...5P....'lq...H.x...h.u8.Rm.Iked..Y.......o......D.......<...22.....\|..&'..O?..CP)...UU.$&.W.'T..-ed..Y....I...c.ax.q.T....LMIAjb",....O...,@e.hb..q..p.;.A.XQ.q&....X.......-ed.....b.....-."%!...(........Eh............L.#k.2_$!....m..>.I&{.`<~8b..................'.:d.4..N.T...:...f..8^...uj....ed>....E.p..x....}=.wjU(.6..Xxz.Y...X.-.m-#.a......i.qk.B...@JB".+....i.V..........[1.....O..\|Xd.^..}.l<.q.jz...T...Z......dX......h.l-}BF..#k.2.=.:}.g.....".....^.....H.OD].}..\|Ld.*.......6..r...ZZH..GQ3..w>...:...]....~....LF.c!..2.%...3.....0..c.U..m...pi..&..k

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12897), with no line terminators
Category:	downloaded
Size (bytes):	12897
Entropy (8bit):	5.0454437987587575
Encrypted:	false
SSDEEP:	192:zREkI8IVOPO5RFRpRURnGxIxG+db3TU1xPiF/p6j3rwzlr2UbJ:zhI8I4y+db3TU1xPiF/p6j3rwzlr2o
MD5:	343687D1BF20A62BEE65DD5D9722A857
SHA1:	E65257DFB0D46CEF5AF4D310F2F7B110790E44E0
SHA-256:	ADFB28B03A724510AAB7C0266479FA9DB96E4D94D6868F444593BCAC6DF8F8DA
SHA-512:	7474C793F5BB931C0F6F5C31C07022AE2F2BE5E9010BBE0C74B9D393AF881B97368D9C800B912D717ADA0CD0D89C6ACD070D18FCBCF5220504B6CCE0CD612D94
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/css/animate.min.css?v=7474c793f5bb931c0f6f5c31c07022ae2f2be5e9010bbe0c74b9d393af881b97368d9c800b912d717ada0cd0d89c6acd070d18fcbcf5220504b6cce0cd612d94
Preview:	@charset "UTF-8";/! animate.css -http://daneden.me/animate * Version - 3.7.0 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2018 Daniel Eden */@-webkit-keyframes bounceIn{0%,20%,40%,60%,80%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{-webkit-transform:scale3d(.3,.3,.3);opacity:0;transform:scale3d(.3,.3,.3)}20%{-webkit-transform:scale3d(1.1,1.1,1.1);transform:scale3d(1.1,1.1,1.1)}40%{-webkit-transform:scale3d(.9,.9,.9);transform:scale3d(.9,.9,.9)}60%{-webkit-transform:scale3d(1.03,1.03,1.03);opacity:1;transform:scale3d(1.03,1.03,1.03)}80%{-webkit-transform:scale3d(.97,.97,.97);transform:scale3d(.97,.97,.97)}to{-webkit-transform:scaleX(1);opacity:1;transform:scaleX(1)}}@keyframes bounceIn{0%,20%,40%,60%,80%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{-webkit-transform:scale3d(.3,.3,.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	40445
Entropy (8bit):	7.9538812900734035
Encrypted:	false
SSDEEP:	768:wCxRWb79YmGpqLvD7Ot13mIU0z29SUUipQcqNitKB:wCab7qpqi1ZU0zCtpQcmitS
MD5:	DD66787B82FF78AED9D5567DB406FC7A
SHA1:	FE7B0D99D4B4BC23540E2A485A9BC192EC4CE6F7
SHA-256:	B45A6FF22DA706E46B2F8DFAAF977CA9343B5534BCD9E319123EFDBBC0F6B06E
SHA-512:	0972DB0FA35F352914BC441F1ADA769FD5AC0D3958109E0BC0D62784FDCFF09B9FCDDBE5D13052FC7DFC9D3FD554E1215A74DCCDF0093BF3ED5F77FAC1443842
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......Exif..MM.*.............................V...........^.(.......................i.........f.......`.......`..............0231...................;............0100.....................@..................ASCII...xr:d:DAF9fCB0WlI:3,j:3615684050494718485,t:24022204.......http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">Untitled design - 1</rdf:li>......</rdf:Alt>.....</dc:title>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:Attrib="http://ns.attribution.com/ads/1.0/">.....<Attrib:Ads>......<rdf:Seq>.......<rdf:li rdf:parseType="Resource">........<Attrib:Created>2024-02-22</Attrib:Created>........<Attrib:ExtId>44371550-b2f5-4607-8530-289893fef441</Attrib:ExtId>........<Attrib:FbId>525265914179580</Attrib:FbId>........<Attrib:TouchTy

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 168, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	130424
Entropy (8bit):	7.990373753941302
Encrypted:	true
SSDEEP:	3072:wfmphz0LwUvqT+euA4dWrwXO5HRmx8V3eu99YHWcYhur0:Rp/UCT+euRdfO5xmx8hF9YHGQr0
MD5:	CBE6F63406D773C2BC51F401AA73626F
SHA1:	32B1207218B0F864E7A842CE2F19A98F266B7DCC
SHA-256:	325596C9249C43C62C88F24B0F2B2A5DEDC5398C0C7E0A5EEC61784161389763
SHA-512:	7D0B06D75C01B941A395BB03333788AAFF5EDCC71005F3576C0DDD1DD02C70B8F5F686C72089A0B8B5E8C9B8B52A7C5C00BCDBCFE7AACD6A3DD536CDD6F5C986
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HPNP05.png
Preview:	.PNG........IHDR...@...........7.....sRGB.........gAMA......a.....pHYs..........+......iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x='adobe:ns:meta/'>. <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:dc='http://purl.org/dc/elements/1.1/'>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang='x-default'>..... - 1</rdf:li>. </rdf:Alt>. </dc:title>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:Attrib='http://ns.attribution.com/ads/1.0/'>. <Attrib:Ads>. <rdf:Seq>. <rdf:li rdf:parseType='Resource'>. <Attrib:Created>2024-04-26</Attrib:Created>. <Attrib:ExtId>5eec93d8-a42e-4f63-bd8d-9791c27fcde7</Attrib:ExtId>. <Attrib:FbId>525265914179580</Attrib:FbId>. <Attrib:TouchType>2</Attrib:TouchType>. </rdf:li>. </rdf:Seq>. </Attrib:Ads>. </rdf:Description>.. <rdf:Description

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-MYEVWDEELX&gacid=1773833745.1730256460&gtm=45je4as0v879548136z8849071394za200zb849071394&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=942063022
Preview:	<html></html>

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58823)
Category:	downloaded
Size (bytes):	58862
Entropy (8bit):	5.436868261653025
Encrypted:	false
SSDEEP:	768:wQzzGlTXaQRT5OeehGXgg99OmpuSv2Z7W2gXKkxK+6htrEFH76aAr:Hn6XHN5OeHh9Om5obKKkK+6D6HA
MD5:	5C158B940513C7DC2EBD901455E9B63D
SHA1:	F992A08C86F88B10ABD35FAE20D468EC52C824E6
SHA-256:	73DE4254959530E4D1D9BEC586379184F96B4953DACF9CD5E5E2BDD7BFECEEF7
SHA-512:	A935D120CC992056FC89071F8D75823BCF8CE536DCDFC422E56CDD3CE6191C8959A730471B72F76F2F3804104E8911A211BECA2AD00E02CE6A61D52266240D35
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/moment.min.js?v=a935d120cc992056fc89071f8d75823bcf8ce536dcdfc422e56cdd3ce6191c8959a730471b72f76f2f3804104e8911a211beca2ad00e02ce6a61d52266240d35
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.moment=t()}(this,function(){"use strict";var e,i;function f(){return e.apply(null,arguments)}function o(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function u(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function m(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function l(e){if(Object.getOwnPropertyNames)return 0===Object.getOwnPropertyNames(e).length;for(var t in e)if(m(e,t))return;return 1}function r(e){return void 0===e}function h(e){return"number"==typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function a(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function d(e,t){for(var n=[],s=0;s<e.length;++s)n.push(t(e[s],s));return n}function c(e,t){for(var n in t)m(t,n)&&(e[n]=t[n]);return m(t,"toString")&&(e.toString=t.toString),m(

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50418)
Category:	downloaded
Size (bytes):	135036
Entropy (8bit):	5.238653514906717
Encrypted:	false
SSDEEP:	3072:Yj6SKvATyVhdGUUj9AUolF1j0iCO5C7Yh4+EVlQWEopgo/UuYWdQW+r/xvtrQCi1:SXWlF1giCO5C7Yh4+EVlQWE5otYWdQ3A
MD5:	99AF4C20044056D9D6E812E09E0BD1F0
SHA1:	9FBA583DB47E1D4FFEB349D92921D85A29B68E85
SHA-256:	853DC0F502CAFBE50350AB8503665E6A907C12585744D84E9AEBE3999C8ED537
SHA-512:	825ACF935F1A2B0C4503C798F7CB013CA99627D98926339FF39D002DBE8F86C0D8C6E0BDB8D65AF238897976C2018D316B179C8A07739295AD913D416D371C10
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/bootstrap/v8513.120578/bootstrap.js
Preview:	(()=>{var ma=Object.create;var Xe=Object.defineProperty,ga=Object.defineProperties,ei=Object.getOwnPropertyDescriptor,ya=Object.getOwnPropertyDescriptors,ha=Object.getOwnPropertyNames,ti=Object.getOwnPropertySymbols,ba=Object.getPrototypeOf,ri=Object.prototype.hasOwnProperty,va=Object.prototype.propertyIsEnumerable,ni=Math.pow,ii=(t,e,r)=>e in t?Xe(t,e,{enumerable:!0,configurable:!0,writable:!0,value:r}):t[e]=r,w=(t,e)=>{for(var r in e\|\|(e={}))ri.call(e,r)&&ii(t,r,e[r]);if(ti)for(var r of ti(e))va.call(e,r)&&ii(t,r,e[r]);return t},H=(t,e)=>ga(t,ya(e)),xa=t=>Xe(t,"__esModule",{value:!0});var oi=(t=>typeof require!="undefined"?require:typeof Proxy!="undefined"?new Proxy(t,{get:(e,r)=>(typeof require!="undefined"?require:e)[r]}):t)(function(t){if(typeof require!="undefined")return require.apply(this,arguments);throw new Error('Dynamic require of "'+t+'" is not supported')});var S=(t,e)=>()=>(e\|\|t((e={exports:{}}).exports,e),e.exports);var wa=(t,e,r)=>{if(e&&typeof e=="object"\|\|typeof e=="

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	31275
Entropy (8bit):	4.891714966865526
Encrypted:	false
SSDEEP:	384:zzZeBDjxOff6/+W1wnpTwhy6PDcYnVH7vAB7GBARHpxm0:zFgpOff6/+W1wnOhySVH7vAB7GBAN
MD5:	55AD22DCA240E95EC64F9B4679D9C466
SHA1:	0F28A5EE98C17B7FAFDF99A488006B917E5CAA72
SHA-256:	077A8130D1F03DEF0B766226EE0267E2106880832E5765A4D71B12C7A86E809C
SHA-512:	700F9591D6D25A13F73A115A64B7A34EE9FEAC0930587D78FA1080BD6562EF34245AAC4C416539F236A81806E907F71EFD552F733AB661065F0A5C44C411EB68
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/js/common.js?v=700f9591d6d25a13f73a115a64b7a34ee9feac0930587d78fa1080bd6562ef34245aac4c416539f236a81806e907f71efd552f733ab661065f0a5c44c411eb68
Preview:	var screenWidth =.. window.innerWidth \|\|.. document.documentElement.clientWidth \|\|.. document.body.clientWidth,.. screenScrollTop = $(window).scrollTop(),.. lightBoxCanChange = true;....var windowHref = window.location.href..var isShangHai = (windowHref.indexOf("metropolitan-shanghai") != -1 \|\| windowHref.indexOf("metropolitan-residence") != -1)..$("body").addClass("is-shang-hai")....var googleMapStyling = [.. { elementType: "geometry", stylers: [{ color: "#f5f5f5" }] },.. { elementType: "labels.icon", stylers: [{ visibility: "off" }] },.. { elementType: "labels.text.fill", stylers: [{ color: "#616161" }] },.. { elementType: "labels.text.stroke", stylers: [{ color: "#f5f5f5" }] },.. {.. featureType: "administrative.land_parcel",.. elementType: "labels.text.fill",.. stylers: [{ color: "#bdbdbd" }],.. },.. {.. featureType: "poi",.. elementType: "geometry",.. stylers: [{ color: "#eeeeee" }],.. },.. {..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 98 x 76, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4113
Entropy (8bit):	7.80289819844934
Encrypted:	false
SSDEEP:	96:76425jmIpChIamHSDsYbC4L0xCp+WzfeXwmqPnu0uTa:760Ux3yDsYb8x4zfeYx
MD5:	4734AFCB78D9924C650A4DAB2E272242
SHA1:	F469ABD9A4EBBE3649C00DC6FF95DA5C3B6AA9BC
SHA-256:	6F0AA78192ECE0F634A47774A370E2687529ED87849572472AD85096029A1F9D
SHA-512:	2B8C5BD6AD8FDBC6AEAFA5F82DCBCF9B7F9C209F5B3E9A4F0E687902087A3DC70141A78DB0F0183DB46B59ECB2D31641D2292D8D1A0E0C664340C7C9996086DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...b...L.......bH....tEXtSoftware.Adobe ImageReadyq.e<...%iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)" xmpMM:InstanceID="xmp.iid:4129547DF3D611EA93298346D5121DD3" xmpMM:DocumentID="xmp.did:4129547EF3D611EA93298346D5121DD3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4129547BF3D611EA93298346D5121DD3" stRef:documentID="xmp.did:4129547CF3D611EA93298346D5121DD3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.8g.....IDATx..].p..........c..T..B+.*....`..RP.j...b[.B...((.....h..a\|........J.CA..A..H..(&.H./.m9..{............

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 320x168, components 3
Category:	dropped
Size (bytes):	34661
Entropy (8bit):	7.9463868294086355
Encrypted:	false
SSDEEP:	768:k+MqfvNIahxekfKQRZ9niVuiFxpsr8ghhqGVm1M0Lm7Y4dMFTC1Gi/:5Mq3NIsxtfPXMEIghhnaM0L4Y716l/
MD5:	069C9FA5FDDE3DD2BF2CA932EFB2F116
SHA1:	F6827D8DF5384A723E30F8D9BF7549EC2779D32D
SHA-256:	F11DCF7AC7F9196980301284A456B45A1096A57F4C05C664561EA82BF4F3C2FC
SHA-512:	D6747F923B5A58F00DA3650C9D2FECEF94A68350782C155F7C44C40D2D5482B9E3DCBF27ECB105E941EC912599A62E62F9F020BF9FD8C3E061E8425941F25CFE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,....."Exif..MM...........................ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.........................................................................@.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	37
Entropy (8bit):	3.966210122385707
Encrypted:	false
SSDEEP:	3:YmESkA8ALQOECf6n:YmESRLECf6
MD5:	9266AED34D166F0B3F69A18E4EC9601F
SHA1:	97B2EC91E52614F3692071689DDB9FE5C40F627D
SHA-256:	8FDDC5539914861A61352C27E7270BE4097DEF323C8C46DEFF59A6F310B15657
SHA-512:	A28F78729031031BAD1CDA68E79DC7A830EF11ADB6067D6EBBB1273506CC7A1FC59EF549EFD5E64A64AF5AD4AF21489BBF043B171E82280D8318FB8D6FA8FAA7
Malicious:	false
Reputation:	low
URL:	https://onboard.triptease.io/features?integrationId=01HCHBD1QV58CBNE1A01G34VDG&clientKey=01HCEXY419T8Y32C0RX4CXEKV0
Preview:	{"CartAbandonment":{"enabled":false}}

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4757), with no line terminators
Category:	downloaded
Size (bytes):	4757
Entropy (8bit):	5.8253441403209845
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUsfJux:1DY0hf1bT47OIqWb1FfJux
MD5:	A6AF3843A29EEE55B202E18D721AA93A
SHA1:	378166D0338C970AEF3A17C7F6524B3D472C18DB
SHA-256:	03FBEB48453FDD2C24FBC89E377BF0C250AC99A356CEE802B54FEDC61BD01F8E
SHA-512:	9FD72E507E4F2FB4B4A06B2264A032CBC13C61F2E6A05C69EBB081A6C32483D642851611FCA234CBD718EA473DEE5AE07E6D2AE4E6379D1F097D7F60E7E2B440
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/945566240/?random=1730256463759&cv=11&fst=1730256463759&bg=ffffff&guid=ON&async=1&gtm=45be4as0z8849071394za201zb849071394&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&hn=www.googleadservices.com&frm=0&tiba=CK%20Group%20Staff%20Offer&npa=0&pscdl=noapi&auid=271674906.1730256461&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 320x168, components 3
Category:	downloaded
Size (bytes):	38918
Entropy (8bit):	7.943023033209985
Encrypted:	false
SSDEEP:	768:p2PZJdmEOBePdupFzkiaRU6TLsC7SVRa/5+gg/GqR/xh2ddUGxS:p2xluzM+6TJSVs+gSTRJh8dTS
MD5:	8298C10F80FFFFCD0775E7D641ABF301
SHA1:	A4C0463B8DD3C0548D2727F59DC904B450742114
SHA-256:	63B30D4D1E76BDAACBDA312F94B2CD8F7C678448FF1F44CB5420CB84493D17B2
SHA-512:	4957138E2F0FCC38A3A54FBB1040D348B406BA86DA1567AB99F2C7113FCB30B5C75B41F436B77D9C13BD0A50AEB9817AA2BA96B7BC09C59729C4706DF159FCC3
Malicious:	false
Reputation:	low
URL:	https://www.harbour-plaza.com/group/files/page/737/HGKLN.jpg
Preview:	......JFIF.....`.`......Exif..MM.*.............................V...........^.(.......................i.........f.......`.......`..............0231...................:............0100.....................@..................ASCII...xr:d:DAF9Z2tVOOY:3,j:952930679670590853,t:24022107....http://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/">.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">CK Offer Graphic - 1</rdf:li>......</rdf:Alt>.....</dc:title>....</rdf:Description>....<rdf:Description rdf:about="" xmlns:Attrib="http://ns.attribution.com/ads/1.0/">.....<Attrib:Ads>......<rdf:Seq>.......<rdf:li rdf:parseType="Resource">........<Attrib:Created>2024-02-21</Attrib:Created>........<Attrib:ExtId>415e8b44-d454-4aea-ae9b-324be889bb51</Attrib:ExtId>........<Attrib:FbId>525265914179580</Attrib:FbId>........<Attrib:TouchType>

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 330 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10846
Entropy (8bit):	7.925459426297656
Encrypted:	false
SSDEEP:	192:wO9W+KNjVIJGtwDtxPJHe18yR2EhAzrwqTZHW0PQY2ipWhW/dbhWTsK0vwpofI4V:wuWxVY5tJBe1LAzrwGH/QYTpBhVwpM3Z
MD5:	A57F0C0FED209B97DB400C81A3C5E528
SHA1:	76C020C78DCBD9767C6AF4C81F220002387BEDE0
SHA-256:	6018EEA6222CDA95C89DB29251BFBADCA525547F12144ECE157AE8973031E499
SHA-512:	0E34B7305A768D83A5908253A3037346EC2E605F0A0DC0EA10A8FAEB622987F711620F5E66295F04E853EE3653184F7939D4854E02558302700836337A1991B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...J.................tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmpMM:InstanceID="xmp.iid:FDBBFD2D356011EBA6C489C9F1DB5FF7" xmpMM:DocumentID="xmp.did:FDBBFD2E356011EBA6C489C9F1DB5FF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FDBBFD2B356011EBA6C489C9F1DB5FF7" stRef:documentID="xmp.did:FDBBFD2C356011EBA6C489C9F1DB5FF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...a..&.IDATx..]...E..x..Ib@...F.......E0....b..Q..... .(.... .....XE]1 bB.L......gjj......\|..:o^OOuwu./.W.***D.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4271)
Category:	downloaded
Size (bytes):	302980
Entropy (8bit):	5.566215958889236
Encrypted:	false
SSDEEP:	3072:52wiztGbETCavoFTy0B5CptDY8/I8+yr/OUYhcDmuD0C8Gp/srT+fRYp:oGbgxvoFNM/GUTd0C8Gp/sS6
MD5:	DC34B3CCA44A3EFF5E5D2AAECF7827A4
SHA1:	062F671066A89E24413B478DB12F2484D864E255
SHA-256:	71D8DC19313F1710C11D7EC8B775CB68B2F111E8318C5CCBEA40BF0E401E0B19
SHA-512:	BE52DF889C68FA18DC3AA66D9FACF90EB5E254225B6BD19621A2B7ED283EF3BC8A18FEAA03DF9250203F2226823D76BCE5511886774E28812E3A1970436B44D8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NP3VTCP
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"10",. . "macros":[{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_fieldsToSet":["list",["map","fieldName","allowLinker","value","true"]],"vtp_useHashAutoLink":false,"vtp_autoLinkDomains":"harbour-plaza.com,be.synxis.com","vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-202272906-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLin

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 03:47:15.167402983 CET	443	49698	104.98.116.138	192.168.2.7
Oct 30, 2024 03:47:15.167617083 CET	49698	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:15.903544903 CET	49674	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:15.903573036 CET	49675	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:16.122637033 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 03:47:16.200246096 CET	49672	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:16.434760094 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 03:47:17.044027090 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 03:47:18.247142076 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 03:47:20.653338909 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 03:47:24.187042952 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:24.187104940 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:24.187335968 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:24.187736034 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:24.187752962 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:24.188409090 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:24.188456059 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:24.188530922 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:24.188739061 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:24.188757896 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:24.675739050 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 03:47:25.058542013 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 03:47:25.464803934 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 03:47:25.488599062 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.488727093 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.491182089 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.491203070 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.491556883 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.491571903 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.492625952 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.492670059 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.492710114 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.492777109 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.495192051 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.495362997 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.495399952 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.495559931 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.495632887 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.507019043 CET	49674	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:25.507052898 CET	49675	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:25.539343119 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.543966055 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.543977022 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.544054031 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.544079065 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.557050943 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:25.557152033 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:25.557244062 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:25.557440996 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:25.557463884 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:25.591883898 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.591893911 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.804919958 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.804950953 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.804963112 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.805010080 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.805044889 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.805061102 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.805083990 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.810908079 CET	49672	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:25.810960054 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 03:47:25.859324932 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.926440001 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.930305004 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.930376053 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.930457115 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.931358099 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.931416035 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.931472063 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.932678938 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.932703018 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.932777882 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.937385082 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.937413931 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.937525034 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.942804098 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.942831993 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.943171978 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.943207979 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.943453074 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.943483114 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.943912983 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.943936110 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.971324921 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.986186981 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.986200094 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.986246109 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.986251116 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.986284018 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.986313105 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.987864017 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.987876892 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.987921953 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.987936020 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.987951994 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.987972021 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.988018990 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.988018990 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.988018990 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:25.988030910 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.988039970 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:25.988097906 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.151640892 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.151729107 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.151745081 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.151829958 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.151880980 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.197366953 CET	49704	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.197411060 CET	443	49704	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.198708057 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.198743105 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.198820114 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.200814962 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.200835943 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.238982916 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.239010096 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.239017010 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.239041090 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.239052057 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.239067078 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.239119053 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.239134073 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.239182949 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.245415926 CET	49705	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.245434999 CET	443	49705	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.246187925 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.246221066 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.246316910 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.248586893 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:26.248605013 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:26.447217941 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:26.448041916 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:26.448108912 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:26.449537992 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:26.449616909 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:26.452317953 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:26.452411890 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:26.497682095 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:26.497708082 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:26.552345037 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:27.194799900 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.205537081 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.210069895 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.244545937 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.257776976 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.257785082 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.258426905 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.288506985 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.314088106 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 03:47:27.471108913 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.514097929 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.525612116 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.567676067 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.744805098 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.744832993 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.745208979 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.745414019 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.745469093 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.745826006 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.745845079 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.746316910 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.746330976 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.746438980 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.746505022 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.747201920 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.747517109 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.747530937 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.747591972 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.748676062 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.748709917 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.749923944 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.750008106 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.753417015 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.753500938 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.753921032 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.753966093 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.755402088 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.755471945 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.755523920 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.755599976 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.757090092 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.757168055 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.758677006 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.758862972 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.759747982 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.759826899 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.760714054 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.760802031 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.761004925 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.761023998 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.761158943 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.761224031 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.761236906 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.761272907 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.761333942 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.761342049 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.761673927 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.761689901 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.803333044 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.803349018 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:27.809257984 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.809257984 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.809266090 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.809271097 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:27.849569082 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:27.849592924 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:27.849709988 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:27.903924942 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:27.903945923 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:28.066761971 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.066792965 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.066798925 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.066817999 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.066827059 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.066836119 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.066880941 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.066905022 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.066925049 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.066956997 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.069273949 CET	49711	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.069320917 CET	443	49711	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.069732904 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.069772005 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.069859982 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.072226048 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.072241068 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231264114 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231288910 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231296062 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231326103 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231337070 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231360912 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.231369019 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231376886 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.231434107 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.231460094 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.233503103 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.233511925 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.233539104 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.233577967 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.233582973 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.233588934 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.233650923 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.233650923 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.236323118 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236360073 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236370087 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236387014 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236397982 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236426115 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.236427069 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236454964 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236478090 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.236490011 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236525059 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.236532927 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.236581087 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.238101006 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238162041 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238183975 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238202095 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238228083 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.238261938 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238286018 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.238343954 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238364935 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238414049 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.238428116 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238517046 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238595009 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238616943 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238667011 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.238672972 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.238675117 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238687038 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.238708973 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.238723993 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.239948988 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.240001917 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.240026951 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.240047932 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.240082979 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.246603012 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.246633053 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.246642113 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.246665001 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.246673107 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.246675968 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.246704102 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.246727943 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.246756077 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.246793985 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.248946905 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.248967886 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.249062061 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.249078989 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.249823093 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.249890089 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.249893904 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.250096083 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.254249096 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.254267931 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.254275084 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.254304886 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.254332066 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.254343033 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.254363060 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.254395008 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.254419088 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.256541014 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.256556988 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.256704092 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.256712914 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.276932001 CET	49716	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.276976109 CET	443	49716	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.278109074 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.278167009 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.278583050 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.283477068 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.283493042 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.294791937 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.310301065 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.403590918 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.403613091 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.403728008 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.403743982 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.403810024 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.404656887 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.404674053 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.404776096 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.404783010 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.404830933 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.406121969 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.406136990 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.406200886 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.406213999 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.406259060 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.406280041 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.407010078 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.407078028 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.407083035 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.407094955 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.407156944 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.409847975 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.409868002 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.409925938 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.409945965 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.409980059 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.410001993 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.411061049 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.411076069 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.411166906 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.411175966 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.411377907 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.411659956 CET	49712	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.411678076 CET	443	49712	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.412162066 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.412251949 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.412339926 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.413041115 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.413057089 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.413127899 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.413139105 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.413254976 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.413381100 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.413417101 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414015055 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414030075 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414089918 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.414097071 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414165974 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.414694071 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414719105 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414760113 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414788008 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.414839983 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.414854050 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.414910078 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.415790081 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.415834904 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.415867090 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.415879011 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.415939093 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.415961027 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.416759968 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.416827917 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.416845083 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.416924000 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.417057991 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.417119026 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.434700012 CET	49709	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.434736013 CET	443	49709	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.436418056 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.436425924 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.436459064 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.436489105 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.436508894 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.436523914 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.436570883 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.436582088 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.437598944 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.437624931 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.437743902 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.438098907 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.438116074 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.438173056 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.438182116 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.438247919 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.439148903 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.439165115 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.439222097 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.439230919 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.439264059 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.439291954 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.439294100 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.439305067 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.440921068 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.440939903 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.440998077 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.441005945 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.441031933 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.441046953 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.582845926 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.582865953 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.582932949 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.582951069 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.582967043 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.583004951 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.583280087 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.583296061 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.583347082 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.583357096 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.583430052 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.583913088 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.583929062 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.583996058 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.584003925 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.584203005 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.587662935 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.587677956 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.587747097 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.587758064 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.587800980 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.588085890 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.588100910 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.588188887 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.588196993 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.588244915 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.588881969 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.588949919 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.588957071 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.588968992 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.589004040 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.589039087 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.589462042 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.589476109 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.589545012 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.589551926 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.589590073 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.618537903 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.618627071 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.618643999 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.618712902 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.625765085 CET	49710	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.625787020 CET	443	49710	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.626563072 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.626616001 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.626734972 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.627288103 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.627301931 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.751986027 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:28.752069950 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:28.755440950 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:28.755446911 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:28.755794048 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:28.755880117 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.755899906 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.755974054 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.755985022 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.755995035 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.756019115 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.756026983 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.756032944 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.756071091 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.756110907 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.756477118 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.756491899 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.756618023 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.756623983 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.756937027 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.757041931 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757055998 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757133961 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.757138968 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757323980 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.757569075 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757586956 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757637978 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.757642984 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757683992 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.757802010 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757870913 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.757894039 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.757956982 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.758208990 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758225918 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758287907 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.758294106 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758342981 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.758536100 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758568048 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758605003 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.758610964 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758631945 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.758656025 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.758848906 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758897066 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.758958101 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.758964062 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.759011984 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.759186983 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.759200096 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.759267092 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.759272099 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.759454012 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.760588884 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.760638952 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.760684967 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.760690928 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.760751009 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.760890007 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.760905027 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.760962963 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.760967970 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.760998011 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.761017084 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.765851974 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.796058893 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:28.817532063 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:28.859358072 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:28.874823093 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.874842882 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.874914885 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.874926090 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.874969959 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.876405001 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.876451015 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.876514912 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.876522064 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.876574039 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.928599119 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.928618908 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.928741932 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.928767920 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.928888083 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.929084063 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.929100037 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.929162979 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.929168940 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.929274082 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.929595947 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.929610968 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.929689884 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.929703951 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.929783106 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.930237055 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930250883 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930299044 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.930304050 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930345058 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.930835962 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930854082 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930898905 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930922985 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.930927992 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930963993 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.930978060 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.930990934 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.930994987 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931035995 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.931370974 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931385040 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931442022 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.931447983 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931516886 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.931828976 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931875944 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931890965 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.931896925 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931910992 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.931941986 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.931967974 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.932226896 CET	49715	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.932239056 CET	443	49715	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.932704926 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.932754993 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:28.932831049 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.933329105 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:28.933357000 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.060097933 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.060179949 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.060291052 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.060333014 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.060348034 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.060359001 CET	49718	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.060364008 CET	443	49718	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.109072924 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.109119892 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.109208107 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.110270023 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.110287905 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.403372049 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.406158924 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.406169891 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.406543016 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.407737970 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.407808065 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.411055088 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.455334902 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.534858942 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.535742044 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.535773039 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.536125898 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.536799908 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.536866903 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.537033081 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.583336115 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.655422926 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.656214952 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.656260967 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.657259941 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.657330990 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.658206940 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.658272028 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.658782005 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.658797979 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.713730097 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.713982105 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.714000940 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.715439081 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.715517044 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.716327906 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.716403008 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.716779947 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.716785908 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.730231047 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.730259895 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.730287075 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.730346918 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.730359077 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.730381966 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.730431080 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.743455887 CET	49719	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.743477106 CET	443	49719	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.762351990 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.797703028 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.908379078 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.908859968 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.908884048 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.909805059 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.909877062 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.911020994 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.911076069 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.911149025 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:29.911154032 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:29.948174000 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.948272943 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:29.948371887 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.948410988 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:29.948438883 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.948468924 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.948818922 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.948843002 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:29.948914051 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.949388027 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.949425936 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:29.949917078 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.949930906 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:29.950268030 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:29.950294018 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:29.954113960 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.954210997 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.956881046 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.956914902 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.957175016 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:29.959984064 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:29.965604067 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.003345013 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:30.014420033 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.014461040 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.014475107 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.014539957 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.014564991 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.014617920 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.016207933 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.016249895 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.016274929 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.016294003 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.016339064 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.019072056 CET	49720	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.019084930 CET	443	49720	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.046621084 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:30.046649933 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:30.046720028 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:30.047388077 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:30.047400951 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:30.134495020 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134557009 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134579897 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134620905 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134625912 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.134640932 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134695053 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134718895 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134752989 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.134752989 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.134754896 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134792089 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.134804964 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.134859085 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.136984110 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.137002945 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.137058020 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.137093067 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.137109041 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.137128115 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.137156010 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.137175083 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.203049898 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:30.203144073 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:30.203242064 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:30.206722021 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.206768036 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.206796885 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.206809044 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.206832886 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.206839085 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.206851959 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.206888914 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.206937075 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.207053900 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.207084894 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.207124949 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.207130909 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.207254887 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.219130039 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:30.219181061 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:30.219213963 CET	49727	443	192.168.2.7	184.28.90.27
Oct 30, 2024 03:47:30.219230890 CET	443	49727	184.28.90.27	192.168.2.7
Oct 30, 2024 03:47:30.219700098 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.219960928 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.219975948 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.220993042 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.221052885 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.223927975 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.223997116 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.225280046 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.225287914 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.293915033 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 03:47:30.310353994 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.310406923 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.310477972 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.310554981 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.310591936 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.310710907 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.311520100 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.311564922 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.311599016 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.311611891 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.311645985 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.311666965 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.313098907 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.313150883 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.313199043 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.313214064 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.313251019 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.313293934 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.313433886 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.314721107 CET	49721	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.314750910 CET	443	49721	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.381594896 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.381658077 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.381707907 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.381724119 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.381772041 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.381809950 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.388951063 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.389533043 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.389554977 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.389621973 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.389626980 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.389769077 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.391268969 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.391288996 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.391350031 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.391355991 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.391405106 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.393131971 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.393151999 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.393214941 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.393219948 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.393270016 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.408879995 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.408904076 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.408910990 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.408935070 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.408946037 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.408966064 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.408972979 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.408987045 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.409043074 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.409070015 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.410654068 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.410669088 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.410727024 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.410733938 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.410780907 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.563477993 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.563549042 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.563569069 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.563579082 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.563632965 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.571012020 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.571063042 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.571090937 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.571096897 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.571182013 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.571810961 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.571861982 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.571890116 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.571894884 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.571943045 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.572969913 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.573014975 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.573050022 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.573055029 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.573100090 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.573818922 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.573882103 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.573894978 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.573909044 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.573941946 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.573965073 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.574805975 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.574855089 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.574887991 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.574892998 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.574939966 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.575719118 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.575745106 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.575793982 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.575798988 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.575834036 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.575879097 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.594089031 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.594121933 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.594161987 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.594168901 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.594254971 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.594404936 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.594460964 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.594476938 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.594481945 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.594516039 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.594528913 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.594567060 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.595324039 CET	49725	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.595335960 CET	443	49725	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.598567009 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.598668098 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.598747969 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.599070072 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.599096060 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.599153996 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.599394083 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.599436045 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.599651098 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.599663973 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.720971107 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.720992088 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.720999956 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.721030951 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.721041918 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.721064091 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.721067905 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.721088886 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.721121073 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.721144915 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.722513914 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.722522020 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.722549915 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.722560883 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.722598076 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.722605944 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.722652912 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.724313021 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.724323034 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.724380970 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.724391937 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.724404097 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.724463940 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.724575996 CET	49726	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.724589109 CET	443	49726	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.745517969 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.745568037 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.745599031 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.745618105 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.745663881 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.745687962 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.752310991 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752356052 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752392054 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.752397060 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752458096 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.752610922 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752650976 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752681017 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.752685070 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752726078 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.752748013 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.752751112 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752825022 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.752878904 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.753561020 CET	49722	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.753571987 CET	443	49722	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.907867908 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.907896042 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.907996893 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.908375025 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.908386946 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.910913944 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.910962105 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.911326885 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.912378073 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.912394047 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.913445950 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.913470030 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.913532019 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.915105104 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:30.915122986 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:30.980457067 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:30.980489016 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:30.980576992 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:30.981384039 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:30.981396914 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.018079042 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.018188953 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.018424988 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.018964052 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.018985987 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.133418083 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.133485079 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.133582115 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.133848906 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.133898973 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.189199924 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.189465046 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.189488888 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.190474987 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.190582991 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.191386938 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.191447973 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.191747904 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.191756010 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.227443933 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.227943897 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.227974892 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.228965998 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.229038954 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.229435921 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.229520082 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.229549885 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.238302946 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.238498926 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.238518000 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.239810944 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.239895105 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.240190029 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.240261078 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.240458012 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.240473986 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.271358967 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.288928032 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.306786060 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.307008982 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.307029963 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.308067083 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.308142900 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.308482885 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.308548927 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.308706999 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.308713913 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.360090971 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.376215935 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.376322031 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.376351118 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.490365028 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.554661036 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.554735899 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.554771900 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.554790974 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.554812908 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.554837942 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.554871082 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.555046082 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.555128098 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.556106091 CET	49730	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.556134939 CET	443	49730	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.556596041 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.556632042 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.556737900 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.557189941 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.557202101 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666274071 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666301012 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666309118 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666341066 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666358948 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666373968 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.666377068 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666412115 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.666429996 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.666464090 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.667880058 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.667887926 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.667901039 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.667908907 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.667927027 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.667937040 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.667965889 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.668013096 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.726219893 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726242065 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726249933 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726264000 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726272106 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726300001 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726336002 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.726377964 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726403952 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.726429939 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.726454020 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.727885008 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.727894068 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.727916002 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.727925062 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.727926970 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.727955103 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.727957964 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.727977991 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.728035927 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.779746056 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.787386894 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.787415028 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.787421942 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.787446022 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.787461042 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.787472010 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.787476063 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.787491083 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.787524939 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.787574053 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.789133072 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.789174080 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.789196014 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.789202929 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.789217949 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.789251089 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.789275885 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.792854071 CET	49731	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.792876959 CET	443	49731	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.803363085 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.803412914 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.803498030 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.804136992 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.804153919 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.838340998 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.838879108 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.838901997 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.839248896 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.839653969 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.839721918 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.840123892 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.841345072 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.841356993 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.841386080 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.841415882 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.841418982 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.841429949 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.841489077 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.842849016 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.842858076 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.842880011 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.842899084 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.842966080 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.842972040 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.843040943 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.843883991 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.843899965 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.843970060 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.843976974 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.844017029 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.844835043 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.844898939 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.844899893 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.844942093 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.850677967 CET	49729	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.850688934 CET	443	49729	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.883336067 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.890300035 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.899508953 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.899522066 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.899856091 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.900716066 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.900779009 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:31.901240110 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:31.911823988 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.911833048 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.911856890 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.911870003 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.911883116 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.911890030 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.911923885 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.911992073 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.913225889 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.913233042 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.913258076 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.913265944 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.913310051 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.913331985 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.913368940 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.913389921 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.914623022 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.914630890 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.914654016 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.914689064 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.914705038 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:31.914740086 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.914788008 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:31.947324991 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.090487957 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.090508938 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.090588093 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.090615988 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.090650082 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.090671062 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.096873045 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.096890926 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.096970081 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.096991062 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.097465038 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.097902060 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.097917080 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.097976923 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.097991943 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.099088907 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.099108934 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.099150896 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.099172115 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.099196911 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.099227905 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.099822044 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.099837065 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.099890947 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.099905014 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.099932909 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.099957943 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.100192070 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.102260113 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.102274895 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.102335930 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.102353096 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.103233099 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.103250027 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.103296995 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.103329897 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.103363037 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.104882002 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.104897976 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.104963064 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.104983091 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.105808020 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.178764105 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.201891899 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.204473972 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.212860107 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.212939024 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.213011026 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.249919891 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.259555101 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.261471033 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.270180941 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.276077032 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.276096106 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.276201963 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.276230097 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.277440071 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.282119989 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.282135010 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.282196999 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.282213926 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.282242060 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.282263041 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.282608032 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.282629967 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.282674074 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.282689095 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.282715082 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.282736063 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.282985926 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283001900 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283051968 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.283066034 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283097982 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.283462048 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283483028 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283524990 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.283559084 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283584118 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.283824921 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283838034 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283890009 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.283912897 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.283937931 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.283960104 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.284308910 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.284323931 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.284379959 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.284394026 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.284677029 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.284696102 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.284740925 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.284755945 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.284784079 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.284801960 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.285023928 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285039902 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285098076 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.285109997 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285515070 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285532951 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285573959 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.285609007 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285636902 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.285877943 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285892010 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.285943985 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.285960913 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.287306070 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.287336111 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.287365913 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.287384987 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.287410021 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.289608955 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.289849043 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.311356068 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.311377048 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.311389923 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.311477900 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.311506987 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.311569929 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.311774015 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.311809063 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.311836958 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.311855078 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.313080072 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.392888069 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.392904043 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.392975092 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.392995119 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.393023014 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.393047094 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.395932913 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.398783922 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.398798943 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.398902893 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.398917913 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.401520014 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.429131985 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.429167986 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.429198980 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.429233074 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.429292917 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.455365896 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.455602884 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.461587906 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.461610079 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.461658955 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.461673975 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.461709976 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.461725950 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.461915016 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.461935043 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.461982012 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.461988926 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.462018013 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.462035894 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.462157011 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.462177992 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.462217093 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.462224007 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.462249994 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.462268114 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.467552900 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.467566967 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.467653036 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.467669964 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.467982054 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.468000889 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.468040943 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.468050957 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.468063116 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.468091011 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.468625069 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.468637943 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.468678951 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.468688965 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.468702078 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.468738079 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.468993902 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.469008923 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.469055891 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.469063044 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.469309092 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.469322920 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.469373941 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.469382048 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.469393969 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.469439983 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.479336977 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.479399920 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.481883049 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.497088909 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.497109890 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.497473001 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.497514009 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.498868942 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.498884916 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.498886108 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.498902082 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.498939037 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.499170065 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.499177933 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.499496937 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.499536991 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.500168085 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.500180960 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.500453949 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.501142979 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.501218081 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.501324892 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.501359940 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.501393080 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.502398968 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.502491951 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.502661943 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.502701044 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.502741098 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.502917051 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.502939939 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.502974987 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.503026962 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.503030062 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.503096104 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.503135920 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.503767014 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.503962994 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.504790068 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.504986048 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.505523920 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.505709887 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.506181002 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.506366014 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.506500006 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.506511927 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.507044077 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.507066011 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.508418083 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.508447886 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.509644985 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.509670019 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.510328054 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.510339022 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.513000011 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.513009071 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.522747040 CET	49733	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.522758007 CET	443	49733	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.523287058 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.523320913 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.523382902 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.527554035 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.527566910 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.547028065 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.551295996 CET	49732	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.551316977 CET	443	49732	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.551630020 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.551661015 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.551774979 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.552669048 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.552696943 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.562025070 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.563498020 CET	49728	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.563513041 CET	443	49728	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.682346106 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:32.682446957 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:32.682539940 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:32.682847023 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:32.682879925 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:32.686964989 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.686964989 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.686980963 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.686980963 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.747445107 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.747525930 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.747626066 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.748034000 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.748075008 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.748140097 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.748701096 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.748735905 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.749017954 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.749030113 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.810683012 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.810842037 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.810900927 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.812300920 CET	49735	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.812309980 CET	443	49735	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.813149929 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.813170910 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.813230038 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.814045906 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.814057112 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.875466108 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.875782967 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.875802994 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.876168013 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.876503944 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.876574993 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.876657009 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.919334888 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.924647093 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.982135057 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982156992 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982165098 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982191086 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982206106 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982213974 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982240915 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.982312918 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982341051 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.982374907 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.982374907 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.989855051 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.989888906 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.989914894 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.989938021 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.989948034 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.989969969 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.989976883 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.989995956 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990010023 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990014076 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990030050 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990039110 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990047932 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990060091 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990060091 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990077019 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990080118 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990097046 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990118027 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990118027 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990159035 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990195036 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990216017 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990225077 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990320921 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990356922 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990375042 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990375996 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990386963 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990410089 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990411043 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990452051 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.990466118 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:32.990801096 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:32.998382092 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998403072 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998410940 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998437881 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998450041 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998461962 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998461008 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998483896 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998512030 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998528957 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998537064 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998538971 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998547077 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998588085 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998596907 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998605967 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998608112 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998626947 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998647928 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998672009 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998677969 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998699903 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998699903 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998699903 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998722076 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998730898 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998740911 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998774052 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998795033 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.998833895 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.998850107 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:32.999092102 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:32.999108076 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.006804943 CET	49736	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.006819963 CET	443	49736	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.007281065 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.007319927 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.007445097 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.008002996 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.008013010 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.049472094 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.079682112 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.084605932 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.084933996 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.084955931 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.085315943 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.085802078 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.085880041 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.085961103 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.099268913 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.099283934 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.099322081 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.099337101 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.099358082 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.099364996 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.099368095 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.099397898 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.099452019 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.108405113 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.108438969 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.108485937 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.108501911 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.108521938 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.108531952 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.108572006 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.108582020 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.108638048 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.115372896 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.115401030 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.115442038 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.115468979 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.115479946 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.115505934 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.115514040 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.115533113 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.115560055 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.125197887 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.125216007 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.169351101 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.169425011 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.169482946 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.169497967 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.169502974 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.169568062 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.169578075 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.169698954 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.216546059 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.216561079 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.216590881 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.216603994 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.216617107 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.216629028 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.216639042 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.216694117 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.227699041 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.227768898 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.227802992 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.227813959 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.227853060 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.227869034 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.232736111 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.232806921 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.232825041 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.232832909 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.232887983 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.285454988 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.285506010 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.285541058 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.285554886 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.285598993 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.333333015 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.333353043 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.333400965 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.333424091 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.333425045 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.333447933 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.333504915 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.346100092 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.346151114 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.346185923 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.346198082 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.346230984 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.346247911 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.349608898 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.349658012 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.349705935 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.349720955 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.349752903 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.349776983 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.380891085 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.380969048 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.381009102 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.381028891 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.381036043 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.381048918 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.381078959 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.381084919 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.381110907 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.381145954 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.381217957 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.381269932 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.401422977 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.401469946 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.401546001 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.401562929 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.401619911 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.401619911 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.435691118 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.435833931 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.442003965 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.442054987 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.442352057 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.450345039 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.450355053 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.450393915 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.450426102 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.450442076 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.450464010 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.450490952 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.453398943 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.453830957 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.453932047 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.453944921 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.454022884 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.454091072 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.455172062 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.455424070 CET	49741	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.455435038 CET	443	49741	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.455921888 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.455950022 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.456070900 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.456595898 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.456609964 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.464787960 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.464843035 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.464884043 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.464893103 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.464936972 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.466222048 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.466268063 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.466305017 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.466312885 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.466350079 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.466367960 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.495364904 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.504626989 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.504684925 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.504750967 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.504767895 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.504806995 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.504822016 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.567220926 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.567249060 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.567332983 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.567344904 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.567400932 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.577554941 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.577577114 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.577632904 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.577642918 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.577682018 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.577713966 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.577740908 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.577765942 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.577765942 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.577796936 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.583000898 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.583065033 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.583095074 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.583110094 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.583157063 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.583178997 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.583539963 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.583571911 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.583616972 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.583626032 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.583655119 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.583678007 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.627721071 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.627770901 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.627814054 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.627829075 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.627862930 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.627883911 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.684366941 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.684390068 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.684478998 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.684499979 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.684585094 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.685873032 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.685913086 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.685950041 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.685966015 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.685987949 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.686002970 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.686044931 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.687948942 CET	49739	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.687971115 CET	443	49739	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.688508034 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.688535929 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.688666105 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.690577030 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.690589905 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.696991920 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.697021961 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.697053909 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.697118998 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.697135925 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.697166920 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.697186947 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.698146105 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.698213100 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.698221922 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.698288918 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.699635983 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.699681997 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.699773073 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.699789047 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.699840069 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.700221062 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.700304031 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.700318098 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.700397968 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.700455904 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.701225996 CET	49743	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.701256990 CET	443	49743	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.701816082 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.701850891 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.701922894 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.701935053 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.702001095 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.702188969 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.702214003 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.702306986 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.703115940 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.703145981 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.703160048 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.703232050 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.703264952 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.703342915 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.703454018 CET	49737	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.703469038 CET	443	49737	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.703824997 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.703834057 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.703902960 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.704834938 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.704849005 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.704879999 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.704891920 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.743901014 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.744003057 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.744019032 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.744101048 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.744232893 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.744606018 CET	49742	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.744621992 CET	443	49742	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.745033979 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.745058060 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.745134115 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.748881102 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.748894930 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.758624077 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.758657932 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.758714914 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.758737087 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.758759022 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.758804083 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.771456003 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.771681070 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.771716118 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.772028923 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.772748947 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.772814035 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.773097992 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.815367937 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.821738005 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.821764946 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.821815014 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.821866035 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.821898937 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.821923971 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.826091051 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.826339960 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.826370001 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.826663971 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.826972961 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.827035904 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.827395916 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:33.871339083 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:33.877489090 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.877499104 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.877567053 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.877587080 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.877625942 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.877643108 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.940335989 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.940361023 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.940423012 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.940438986 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:33.940473080 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.940484047 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:33.940496922 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.940550089 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.940601110 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:33.940634012 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:33.940983057 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.022777081 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.023062944 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.023076057 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.023438931 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.026855946 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.026911020 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.027215958 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.029321909 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.029601097 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.029658079 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.030132055 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.030590057 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.030682087 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.030716896 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.058993101 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.059056044 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.059101105 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.059133053 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.059168100 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.059187889 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.059501886 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.059525967 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.059583902 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.059612036 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.059662104 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.059704065 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.071341038 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.071342945 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.071902990 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.073806047 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.073827028 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.073892117 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.073910952 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.082209110 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.086783886 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.086791992 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.089284897 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.089360952 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.090004921 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.090167999 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.090187073 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.131356955 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.135895014 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.135921001 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.135970116 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.136037111 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.136087894 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.175632954 CET	49746	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.175663948 CET	443	49746	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.176115990 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.176208019 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.176517963 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.176986933 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.177021980 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.177628040 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.177658081 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.177711964 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.177722931 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.177778959 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.178333044 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.178360939 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.178446054 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.178463936 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.178495884 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.178570986 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.234446049 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.234498978 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.234538078 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.234545946 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.234594107 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.247169018 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.247188091 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.247272968 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.247297049 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.271832943 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.272774935 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.272784948 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.273749113 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.273816109 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.274277925 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.274331093 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.274828911 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.274833918 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.280750036 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.280756950 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.296566963 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.296592951 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.296684027 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.296725035 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.296869040 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.297355890 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.297403097 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.297446966 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.297455072 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.297489882 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.297508001 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.307985067 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.332448006 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.332544088 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.332722902 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.333880901 CET	49749	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.333893061 CET	443	49749	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.334733009 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.334753036 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.335097075 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.336160898 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.336174011 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.363569021 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.363576889 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.363604069 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.363629103 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.363646030 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.363701105 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.364089966 CET	49745	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.364103079 CET	443	49745	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.365237951 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.365263939 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.365463972 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.366444111 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.366456032 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.391052008 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.391099930 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.395095110 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.395169020 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.395186901 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.395205021 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.395224094 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.395236969 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.395279884 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.415678978 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.415709972 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.415731907 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.415781021 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.415782928 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.415812016 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.415883064 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.415920019 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.415927887 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.415927887 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.415932894 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.415956020 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.415976048 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.416081905 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.416136980 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.420871019 CET	49738	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.420887947 CET	443	49738	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.421983004 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.421998978 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.422188044 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.425611019 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.425623894 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.458146095 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.458179951 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.458254099 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.458272934 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.458336115 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.458415031 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.513009071 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.513031960 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.513072014 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.513127089 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.513139009 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.513202906 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.513382912 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.513807058 CET	49750	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.513813972 CET	443	49750	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.528312922 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.528348923 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.528359890 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.528392076 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.528414965 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.528417110 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.528461933 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.528493881 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.528493881 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.528525114 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.576704025 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.576730967 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.576787949 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.576813936 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.576843977 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.577090979 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.580864906 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.580885887 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.580893040 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.580920935 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.580948114 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.580957890 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.580981970 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.581551075 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.581597090 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.581600904 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.581610918 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:34.581636906 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.581665993 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:34.645442963 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.645476103 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.645520926 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.645556927 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.645587921 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.645740986 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.646331072 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.646390915 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.646406889 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.646430969 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.646460056 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.646501064 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.653618097 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.653650045 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.653687954 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.653704882 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.653733015 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.653759003 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.736246109 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.771442890 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.771475077 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.771558046 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.771627903 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.771678925 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.780462980 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:34.814382076 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.814409971 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.814548969 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.814620018 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.814663887 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.814690113 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.932810068 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.932842970 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.932987928 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.933057070 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.933113098 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.933227062 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.933296919 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.933306932 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:34.933370113 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:34.977334976 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:34.996972084 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.009458065 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.017823935 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.020267963 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.049015045 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.065006971 CET	49671	443	192.168.2.7	204.79.197.203
Oct 30, 2024 03:47:35.065010071 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.065026045 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.251804113 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.253024101 CET	49747	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.253046989 CET	443	49747	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.259979963 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.260001898 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.261476994 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.301040888 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.316505909 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.316768885 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.316785097 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.316946983 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.317027092 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.317044020 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.317461014 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.317472935 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.317667007 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.317678928 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.318140030 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.318159103 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.318212032 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.318233967 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.318380117 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.318439960 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.318526983 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.319268942 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.319339037 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.319932938 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.320018053 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.321695089 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.321782112 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.322302103 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.322396994 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.322431087 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.322524071 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.322530985 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.322760105 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.323048115 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.323055983 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.323709011 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.323892117 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.324965000 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.324978113 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.359334946 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.363342047 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.371042967 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.371043921 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.371067047 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.475574970 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.509392977 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.509484053 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.509814024 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.517050028 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.517127037 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.522351980 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.530546904 CET	49748	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.530607939 CET	443	49748	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.531084061 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.531131029 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.531240940 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.531481981 CET	49751	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.531496048 CET	443	49751	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.532336950 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.532351971 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.539345026 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.539347887 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.539365053 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.539366007 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.539447069 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.539582014 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.541846037 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.541851997 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.541908026 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542386055 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542393923 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.542454958 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542555094 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542567015 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.542582035 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542599916 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.542656898 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542727947 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542740107 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.542797089 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.542812109 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.543536901 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.543550014 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.543884993 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:35.543896914 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:35.567337036 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.614937067 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.615453959 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.615463972 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.615842104 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.616343975 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.616409063 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.616539001 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.624564886 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.624640942 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.624696016 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.625781059 CET	49752	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.625790119 CET	443	49752	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.639296055 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.639323950 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.639331102 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.639364004 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.639389992 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.639406919 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.639420033 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.640651941 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.640863895 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.640881062 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.641180038 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.641570091 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.641629934 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.641694069 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.663327932 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.680046082 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.687345982 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.704063892 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.704371929 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.704380989 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.704844952 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.705683947 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.705765963 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.706047058 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.747327089 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805309057 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805337906 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805345058 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805370092 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805398941 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805406094 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805406094 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.805418968 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.805448055 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.805474043 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.811738968 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.811784029 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.811815023 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.811826944 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.811836958 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.811846018 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.811877012 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.811906099 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.811911106 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.811949015 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.811953068 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.811999083 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.812908888 CET	49754	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.812915087 CET	443	49754	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.821899891 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.821957111 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.821979046 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822010040 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.822012901 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822029114 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822046995 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822052956 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.822072983 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822087049 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.822094917 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822109938 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.822129011 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.822129011 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822149038 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.822253942 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.822308064 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.822314978 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.824806929 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.824820042 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.824858904 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.824877024 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.824882030 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.824896097 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.824927092 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.824934959 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.824959040 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.824980974 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.833966970 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.833986998 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.833993912 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.834054947 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.834079027 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.872113943 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.888111115 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.922775984 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.922806025 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.922873020 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.922883034 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:35.922933102 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:35.940346003 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.940377951 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.940416098 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.940423012 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.940443039 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.940474033 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.940484047 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.940510988 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.940536976 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.941088915 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.941153049 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.941159964 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.941252947 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.941306114 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.941339970 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.941349983 CET	443	49755	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.941366911 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.941394091 CET	49755	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.949110031 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.949122906 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.949161053 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.949198961 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.949208975 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:35.949254990 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:35.949268103 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.015671968 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.015727043 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.015818119 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.015830040 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.015876055 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.015902996 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.015985012 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.018536091 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.018547058 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.018605947 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.018631935 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.018635035 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.018682003 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.018682003 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.040383101 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.040407896 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.040453911 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.040468931 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.040507078 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.040522099 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.048530102 CET	49759	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.048569918 CET	443	49759	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.071341991 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.071425915 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.071433067 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.071461916 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.071501017 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.071536064 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.084758997 CET	49753	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.084769964 CET	443	49753	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.085762024 CET	49762	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.085781097 CET	443	49762	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.094116926 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.094136953 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.094192982 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.094394922 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.094420910 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.094470024 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.094650984 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.094665051 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.094806910 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.094821930 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.112868071 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.112903118 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.112921000 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.112987041 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.113004923 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.113029957 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.113076925 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.134066105 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.134090900 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.134105921 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.134166002 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.134187937 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.134227037 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.134242058 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.134275913 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.136878967 CET	49761	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.136897087 CET	443	49761	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.142782927 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.142817020 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.142874956 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.143266916 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.143280029 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.144828081 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.144908905 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.144979000 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.145467043 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.145503044 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.145895004 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.145915985 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.145968914 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.146289110 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.146301985 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.156917095 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.156929016 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.156990051 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.157341003 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.157354116 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.164834976 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.164891005 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.164954901 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.165559053 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.165585995 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.168904066 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.168916941 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.168971062 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.169120073 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.169131041 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.169451952 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.169509888 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.169538975 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.169553041 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.169579029 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.169588089 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.170391083 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.170418024 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.170480967 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.170615911 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:36.170640945 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:36.230339050 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.230369091 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.230451107 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.230463982 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.230475903 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.230523109 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.247685909 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 03:47:36.269666910 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.279469013 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.279541016 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.279587030 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.279596090 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.279628992 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.279753923 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.284491062 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.297199011 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.304620028 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.305063963 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.310013056 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.326174021 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.341984987 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.343105078 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.343149900 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.343235016 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.343235970 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.343247890 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.343462944 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.347425938 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.347448111 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.347611904 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.347620010 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.351807117 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.357983112 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.358094931 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.430571079 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.430577993 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.431267023 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.431271076 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.431850910 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.431854963 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.432579041 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.432584047 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.433556080 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.433564901 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.434467077 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.434472084 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.434861898 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.434875965 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.435609102 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.435614109 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.436201096 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.436204910 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.436518908 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.436570883 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.436610937 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.436618090 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.436647892 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.436727047 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.445494890 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:36.445647001 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:36.445802927 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:36.448240995 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.448250055 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.464735985 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.464793921 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.464834929 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.464847088 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.464909077 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.464965105 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.511240959 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.511316061 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.511359930 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.511374950 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.511384964 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.511467934 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.511651039 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.558902025 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.559007883 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.559128046 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.562781096 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.562804937 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.562903881 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.562913895 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.563011885 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.563016891 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.563057899 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.563173056 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.563227892 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.563265085 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.563311100 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.563325882 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.563380957 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.563381910 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.563545942 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.564131021 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.564146996 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.564208031 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.564249039 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.564378023 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.576639891 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.576761007 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:36.577219963 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:36.582020998 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.582067966 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.582103968 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.582113981 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.582170010 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.582170010 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.699457884 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.699503899 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.699547052 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.699557066 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.699649096 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.699959040 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.801397085 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.816005945 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.816055059 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.816116095 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.816132069 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.816174030 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.816361904 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.817095041 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.817270041 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.817289114 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:36.819466114 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:36.844105005 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.033981085 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.033999920 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.034356117 CET	49756	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.034382105 CET	443	49756	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.035036087 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.035062075 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.035394907 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.035418987 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.037014008 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.037028074 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.037034988 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.037223101 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.038124084 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.038836956 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.038836956 CET	49765	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.038861990 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.038870096 CET	443	49765	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.040452957 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.040458918 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.040497065 CET	49766	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.040501118 CET	443	49766	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.040713072 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.040718079 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.040747881 CET	49767	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.040752888 CET	443	49767	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.041542053 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.041546106 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.041579008 CET	49764	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.041583061 CET	443	49764	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.042495012 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.042514086 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.042550087 CET	49768	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.042555094 CET	443	49768	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.066317081 CET	49760	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.066342115 CET	443	49760	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.066677094 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.066699982 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.066914082 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.067933083 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.067950964 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.079368114 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.363869905 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.401321888 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.401408911 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.401505947 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.403212070 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.411070108 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.412343025 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.412636995 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.418675900 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.434865952 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.435548067 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.459634066 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.466341019 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.466348886 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.466348886 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.466357946 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.485295057 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.485310078 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.488105059 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.500293016 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.526071072 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526125908 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526170969 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526190042 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526300907 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.526302099 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.526321888 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526374102 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.526856899 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526905060 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526921988 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.526930094 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.526969910 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.530323982 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.641454935 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.641647100 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.641690969 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.641714096 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.707679033 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.707709074 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.707830906 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.707845926 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.708117008 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.708137989 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.708272934 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.708285093 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.708436966 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.708508015 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.708591938 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.708616972 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.708687067 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.708700895 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.708791018 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.708813906 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709114075 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.709127903 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.709141970 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.709253073 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709471941 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709489107 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709534883 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.709558010 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709748030 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.709827900 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.709858894 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709877014 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709914923 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.709920883 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.709980965 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.710464001 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.710524082 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.710804939 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.711165905 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.711261988 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.711508036 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.711697102 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.711874008 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.711962938 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.712184906 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.712255001 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.712445974 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.712479115 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.712526083 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.712562084 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.712605953 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.712800980 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.712853909 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.713342905 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.713532925 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.713886023 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.713989973 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.714035988 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.714044094 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.714061022 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.714083910 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.714158058 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.714170933 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.714199066 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.714214087 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.714293957 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.714392900 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.714405060 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.714432001 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.714440107 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.718375921 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.718422890 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.755374908 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.759331942 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.759334087 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.759337902 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:37.769329071 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.769329071 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.769346952 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.769359112 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.769359112 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:37.852507114 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.852603912 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.852684021 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.854399920 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.854439974 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.854516029 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.854862928 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.854897022 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.858062983 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.858076096 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.858272076 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.858295918 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.858365059 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.858701944 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.858726025 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.859078884 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.859087944 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.859150887 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.862282991 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:37.862302065 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:37.864839077 CET	49763	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.864862919 CET	443	49763	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.865137100 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.865170002 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.865235090 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.866457939 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:37.866476059 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:37.949137926 CET	49698	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:37.950979948 CET	49790	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:37.951040030 CET	443	49790	104.98.116.138	192.168.2.7
Oct 30, 2024 03:47:37.951136112 CET	49790	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:37.954636097 CET	443	49698	104.98.116.138	192.168.2.7
Oct 30, 2024 03:47:37.965404034 CET	49790	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:37.965420008 CET	443	49790	104.98.116.138	192.168.2.7
Oct 30, 2024 03:47:38.016690016 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.016752958 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.016773939 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.016792059 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.016829014 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.016902924 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.016938925 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.017129898 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.017168045 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.017177105 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.017210960 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.017216921 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.017246008 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.017257929 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.017257929 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.021260023 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.021287918 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.021295071 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.021382093 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.021406889 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.022068024 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.022130013 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.022144079 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.022170067 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.022222042 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.022500992 CET	49778	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.022547960 CET	443	49778	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028575897 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028636932 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028693914 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.028704882 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028742075 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028763056 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.028764009 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028810024 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.028822899 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028870106 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.028950930 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.028999090 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.029444933 CET	49777	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.029459000 CET	443	49777	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.066374063 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.066400051 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.191447973 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.191525936 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.191566944 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.191585064 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.191586971 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.191617012 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.191621065 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.191644907 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.191670895 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.192148924 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.192190886 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.192217112 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.192225933 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.192266941 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.192914963 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.192945004 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.192961931 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.192991018 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.193005085 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.193018913 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.193025112 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.193043947 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.193056107 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.193072081 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.193074942 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.193116903 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.195852995 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.195907116 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.195947886 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.195959091 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.195966959 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.195995092 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.195997000 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.196013927 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.196046114 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.196063995 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.196098089 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.196110964 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.196124077 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.196185112 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.196230888 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.196238041 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.196367025 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.196388006 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.196417093 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.196430922 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.196458101 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.196495056 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.196499109 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.196508884 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.196510077 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.196549892 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.196584940 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.196624041 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.197041035 CET	49776	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.197052956 CET	443	49776	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197539091 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197566032 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197590113 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197599888 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197607040 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.197613001 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197623014 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197640896 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.197648048 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197675943 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.197699070 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.197766066 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197810888 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.197817087 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197860003 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.197904110 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.199193954 CET	49708	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:47:38.199227095 CET	443	49708	142.250.184.196	192.168.2.7
Oct 30, 2024 03:47:38.200192928 CET	49774	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.200202942 CET	443	49774	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.208666086 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.208739042 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.208760977 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.208796024 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.208801985 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.208827972 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.208834887 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.208848953 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.208853960 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.208880901 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.208899021 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.209000111 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.209048033 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.209073067 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:38.209141016 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:38.209212065 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:38.209733009 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:38.209764957 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:38.210169077 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210195065 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210203886 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210227013 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210238934 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210247040 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.210249901 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210268021 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210274935 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.210304022 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.210333109 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.210922956 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:38.210951090 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:38.211004019 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:38.211358070 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:38.211373091 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:38.242490053 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.310009003 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.310086012 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.310101032 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.310192108 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.310255051 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.310744047 CET	49772	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.310759068 CET	443	49772	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.311816931 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.311830997 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.311856985 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.311866999 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.311928988 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.311971903 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.312005043 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.312028885 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.312839031 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.312861919 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.312877893 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.312912941 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.312917948 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.312937975 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.312957048 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.312977076 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.312987089 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.313016891 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.313038111 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.313574076 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.313647032 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.313652992 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.313730001 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.313776016 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.314573050 CET	49779	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.314578056 CET	443	49779	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.322488070 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:38.322560072 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:38.322635889 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:38.322947025 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:38.323002100 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:38.329309940 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.329334974 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.329410076 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.329426050 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.329454899 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.332041979 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.332098961 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.332159042 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.332173109 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.332185030 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.332214117 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.332251072 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.332443953 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.332891941 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.332901955 CET	443	49771	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.332922935 CET	49771	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.337811947 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.338025093 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.338032007 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.339477062 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.339545965 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.339874983 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.339982033 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.339998960 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.341151953 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.341353893 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.341362000 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.341727018 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.342041969 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.342111111 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.342178106 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.383337021 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.383347988 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.429924011 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.430006027 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.430013895 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.430085897 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.431652069 CET	49775	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.431665897 CET	443	49775	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.441740036 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.441806078 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.441878080 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.442631006 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.442662001 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.447637081 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.447680950 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.447704077 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.447711945 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.447762966 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.453974962 CET	49780	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.453991890 CET	443	49780	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.458030939 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.458060026 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.458108902 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.458548069 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:38.458559990 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:38.466444016 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.469054937 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.469098091 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.470079899 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.470093012 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.491995096 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.492037058 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.492134094 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.492530107 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.492558956 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.495611906 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.495637894 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.495785952 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.496633053 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.496654987 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.496810913 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.497328043 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.497354984 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.497812986 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.497828007 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.546123028 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.546140909 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.590411901 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.598551989 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.598718882 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.599272966 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.601156950 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.601187944 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.604007959 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.625754118 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.625777960 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.627757072 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.627768993 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.628993988 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.629009962 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.630189896 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.630196095 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.630631924 CET	49783	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.630673885 CET	443	49783	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.633410931 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.633440971 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.634291887 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.634299040 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.634790897 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.634803057 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.635567904 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.635572910 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.647192001 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.647274971 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.647391081 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.647725105 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.647756100 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.654244900 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.654273987 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.654295921 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.654315948 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.654330969 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.654381990 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.654387951 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.654428959 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.753356934 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.753395081 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.753563881 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.753632069 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.753776073 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.753865004 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.754590034 CET	49784	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.754632950 CET	443	49784	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.757091045 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.757107973 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.757132053 CET	49786	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.757147074 CET	443	49786	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.760174036 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.760395050 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.760421038 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.760474920 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.760539055 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.760597944 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.761311054 CET	49785	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.761322975 CET	443	49785	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.762816906 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.762823105 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.762830973 CET	49787	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.762835979 CET	443	49787	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.768990993 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.769010067 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.769196033 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.775614023 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.775640965 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.775922060 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.776587963 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.776602030 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.778017044 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.778084040 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.778146982 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.778335094 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.778369904 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.780519962 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.780534983 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.784673929 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.784687042 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.784902096 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.785450935 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:38.785470963 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:38.828104019 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.828128099 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.828141928 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.828197956 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.828212023 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.828263044 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.839143991 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.839181900 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.839200974 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.839214087 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.839268923 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.839276075 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.839437962 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.839509964 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.852941990 CET	49781	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.852952957 CET	443	49781	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.853434086 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.853454113 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.853534937 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.855427027 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.855439901 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.946758032 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.946795940 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.946836948 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:38.946861982 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:38.946883917 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.038847923 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.039823055 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.039879084 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.041444063 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.041508913 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.065653086 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.065673113 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.065712929 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.065742970 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.065753937 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.065779924 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.065782070 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.065845013 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.082140923 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.091190100 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.091202974 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.093024015 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.093133926 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.150945902 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.151107073 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.160562992 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.166426897 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.166466951 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.173860073 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.174177885 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.174299955 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.174310923 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.177385092 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.177392960 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.177973986 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.178694963 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.178792000 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.179199934 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.183835030 CET	49782	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.183852911 CET	443	49782	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.184712887 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.184741020 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.184817076 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.185940981 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.185952902 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.193952084 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.194343090 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.194390059 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.195842981 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.195909977 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.197911978 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.198012114 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.198470116 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.198486090 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.223334074 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.244724035 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.244863987 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.259929895 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.378109932 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.408668041 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.408688068 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.409089088 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.409168959 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.409230947 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.413542986 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.413547993 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.440646887 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.440737963 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.440768003 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.440783024 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.440787077 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.440802097 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.440881014 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.440896988 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.440906048 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.440984011 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.440994978 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.441040039 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.441167116 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.441174984 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.441195965 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.441483021 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.441499949 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.441808939 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.441874027 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.441886902 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.463620901 CET	49791	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.463664055 CET	443	49791	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.477693081 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.477755070 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.477843046 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.478523970 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:39.478555918 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:39.483359098 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.483459949 CET	443	49792	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:39.483617067 CET	49792	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:39.486970901 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.487009048 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.487071991 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.487432003 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.487447023 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.523217916 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.523679972 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.523736000 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.524096012 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.524107933 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.525348902 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.525656939 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.525672913 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.526017904 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.526024103 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.526628971 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.526962996 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.526976109 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.527297020 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.527302027 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.527542114 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.528227091 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.528242111 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.528604031 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.528608084 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.539930105 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.540160894 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.540452957 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.540452957 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.540481091 CET	49801	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.540491104 CET	443	49801	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.542830944 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.542900085 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.543016911 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.543185949 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.543219090 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.546000004 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.549932957 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.564656973 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.564809084 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.564841032 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.564928055 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.565185070 CET	49793	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:39.565227032 CET	443	49793	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:39.566912889 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.566963911 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.567043066 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.567208052 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.567231894 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.652484894 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.652648926 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.652714014 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.652838945 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.652838945 CET	49805	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.652888060 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.652920008 CET	443	49805	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.655560017 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.655617952 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.655703068 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.655900002 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.655932903 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.656698942 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.656871080 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.656930923 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.657002926 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.657017946 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.657037973 CET	49806	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.657047033 CET	443	49806	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.657427073 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.657604933 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.657665014 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.657692909 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.657701969 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.657716990 CET	49804	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.657721996 CET	443	49804	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.660135031 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.660161018 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.660171986 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.660196066 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.660217047 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.660243034 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.660327911 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.660341978 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.660398006 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.660408020 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.674112082 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674141884 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674160957 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674212933 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.674226999 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674262047 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.674273014 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674278021 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.674295902 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674338102 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.674346924 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674374104 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.674386024 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.674420118 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.675059080 CET	49788	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.675066948 CET	443	49788	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.675403118 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.675435066 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.675491095 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.676038980 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.676053047 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.714376926 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.714816093 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.714853048 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.715356112 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.715796947 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.715897083 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.716375113 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.719379902 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.719762087 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.719773054 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.720133066 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.720422029 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.720484018 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.720693111 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:39.749475002 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.749830008 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.749851942 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.750334024 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.750591040 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.750694990 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.750699043 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.759354115 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.767329931 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:39.781560898 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.781832933 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.781853914 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.782211065 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.782502890 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.782576084 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.782685995 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.792284966 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.792598009 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.792606115 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.795336962 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.796056986 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.796139002 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.796509027 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.796582937 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.796896935 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.796904087 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.826956987 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.827270985 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.827337980 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.827337980 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:39.827440023 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.827440023 CET	49803	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.827456951 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.827466011 CET	443	49803	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.829799891 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.829832077 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.830091953 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.830234051 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:39.830246925 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:39.849992990 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:39.850141048 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.024043083 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.024101019 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.024189949 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.024199963 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.024256945 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.024315119 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.025243044 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.025273085 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.025337934 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.025346994 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.025407076 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.142498970 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.229967117 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.229974031 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.231206894 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233616114 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233644009 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233650923 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233697891 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233720064 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.233751059 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233778954 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233831882 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233875036 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.233912945 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.233912945 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.233912945 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.234411955 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.234481096 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.234481096 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.234591961 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.235770941 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.235949993 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.238845110 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.276278019 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.276299953 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.276346922 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.276365995 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.276391029 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.276431084 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.276464939 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.283277988 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283354998 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283363104 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283385038 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283402920 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283432007 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.283441067 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283461094 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283487082 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283507109 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.283519983 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.283541918 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.283582926 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283643007 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.283695936 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283850908 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.283905029 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.294945955 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.298402071 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.301845074 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:40.301913023 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.302453995 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.307521105 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:40.307656050 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.309833050 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:40.330522060 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.330559015 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.331512928 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.331526995 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.335192919 CET	49795	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.335222960 CET	443	49795	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.335865021 CET	49796	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.335890055 CET	443	49796	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.336366892 CET	49799	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.336385012 CET	443	49799	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.351345062 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.353010893 CET	49798	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.353034019 CET	443	49798	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.368396044 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:40.368416071 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:40.368568897 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:40.368952036 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:40.368967056 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:40.393142939 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.395684004 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.395718098 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.395759106 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.395767927 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.395785093 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.395822048 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.395834923 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.395862103 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.395883083 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.398477077 CET	49797	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.398494005 CET	443	49797	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.401681900 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.401701927 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.405400991 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.405406952 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.408148050 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.409094095 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.409127951 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.409580946 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.409594059 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.433312893 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.433753967 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.433768988 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.434169054 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.434174061 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.460108042 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.460293055 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.460361958 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.473980904 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.473980904 CET	49812	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.474010944 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.474036932 CET	443	49812	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.484033108 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.484354019 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.484370947 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.484863043 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.485291004 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.485373974 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.485466003 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.502994061 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.503000975 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.503071070 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.509274960 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.509285927 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.527345896 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.531095028 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.531162977 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.531263113 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.531687021 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.531706095 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.532593012 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.532839060 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.532939911 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.533504963 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.533521891 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.533593893 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.533601046 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.533612013 CET	49816	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.533616066 CET	443	49816	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.533627033 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.533932924 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.533946037 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.538172007 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:40.538197041 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:40.538343906 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:40.538552999 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.538552999 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:40.538566113 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.538583040 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:40.538619041 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.538975954 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.538988113 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.539417028 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.539572001 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.539643049 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.539797068 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.539813042 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.539843082 CET	49814	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.539856911 CET	443	49814	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.544595003 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.544632912 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.544719934 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.544891119 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.544920921 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.552386999 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.552469969 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.552540064 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:40.553740025 CET	49809	443	192.168.2.7	63.140.62.17
Oct 30, 2024 03:47:40.553755999 CET	443	49809	63.140.62.17	192.168.2.7
Oct 30, 2024 03:47:40.569408894 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.569562912 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.569627047 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.570642948 CET	49815	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.570657015 CET	443	49815	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.578963041 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.578973055 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.579050064 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.579350948 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.579395056 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.579406023 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.579716921 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.579727888 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.580476046 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.580480099 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.608911037 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:40.608933926 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:40.609030962 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:40.609307051 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:40.609332085 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:40.714876890 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.715079069 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.715152025 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.715413094 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.715419054 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.715428114 CET	49818	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.715430975 CET	443	49818	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.719871998 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.719927073 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.720052004 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.720537901 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:40.720566034 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:40.734391928 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734447956 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734484911 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734502077 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.734503031 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734532118 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734539986 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.734561920 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.734591007 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734630108 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734657049 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.734663010 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734683990 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.734745979 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.734805107 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.734813929 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.748558998 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.749186993 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.749196053 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.750238895 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.750323057 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.750704050 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.750766993 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.750850916 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.750858068 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.796360970 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.796411991 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.839978933 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.840287924 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.840332985 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.843882084 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.844172955 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.844394922 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.844564915 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.844571114 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.851037979 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851063013 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851079941 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851109982 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.851124048 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851142883 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851150990 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.851161003 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851183891 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851187944 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.851210117 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.851233006 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.851286888 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851483107 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.851537943 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.851874113 CET	49807	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.851883888 CET	443	49807	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.887334108 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.908986092 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:40.909018040 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:40.940325975 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.940754890 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.940783024 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.942194939 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.942266941 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.942596912 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.942675114 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.942780972 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.983530045 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.983561993 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.983583927 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.983661890 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.983673096 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:40.983732939 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:40.987334967 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.026700020 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.026714087 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.026726961 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.057295084 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.057316065 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.057329893 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.057368994 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.057375908 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.057398081 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.057432890 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.057439089 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.057455063 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.057466030 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.057507992 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.060089111 CET	49810	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.060094118 CET	443	49810	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.064125061 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.064193964 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.064291000 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.064548969 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.064580917 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.101042032 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.101075888 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.101118088 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.101128101 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.101171970 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.101191998 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.141916037 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.149663925 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.149727106 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.149749041 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.149789095 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.149810076 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.149826050 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.149888992 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.149991035 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.150770903 CET	49813	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:41.150794983 CET	443	49813	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:41.157871008 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.157912016 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.158181906 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.158409119 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.158437014 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.218430996 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.218595982 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.218641043 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.218668938 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.218676090 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.218707085 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.218712091 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.218719006 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.218750954 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.218786001 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.219153881 CET	49808	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.219160080 CET	443	49808	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.219738007 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.219798088 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.220623016 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.220685005 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.220802069 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.255110979 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.255702972 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.255717039 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.256283998 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.256289005 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.267355919 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.277978897 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.286075115 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.286114931 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.287673950 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.287693024 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.307431936 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.308396101 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.308396101 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.308422089 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.308434010 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.319366932 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.324712038 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.324712038 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.324734926 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.324743032 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.345659018 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.345671892 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.373229980 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.373912096 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.373922110 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.375360966 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.375824928 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.375824928 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.375905991 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.376291990 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.376298904 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.385597944 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.385710955 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.386004925 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.386269093 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.386269093 CET	49824	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.386279106 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.386287928 CET	443	49824	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.393086910 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.393104076 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.393210888 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.393723965 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.393738031 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.412518978 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.412708998 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.412791967 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.412928104 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.412928104 CET	49830	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.412957907 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.412982941 CET	443	49830	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.415447950 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.415456057 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.415739059 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.416057110 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.416069031 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.426676035 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.426719904 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.426731110 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.426753998 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.426769018 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.426778078 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.426784992 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.426796913 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.426831007 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.426831007 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.426922083 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.427702904 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.427712917 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.427747965 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.427870989 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.427879095 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.428227901 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.442315102 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.442411900 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.443416119 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.443416119 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.444329977 CET	49829	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.444344044 CET	443	49829	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.445766926 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.445781946 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.445911884 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.447338104 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.447349072 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.450855970 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.450999022 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.451126099 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.451126099 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.451282024 CET	49832	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.451287985 CET	443	49832	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.451445103 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.453389883 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.453404903 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.453660011 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.453660011 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.453679085 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.466830969 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.467283010 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.467336893 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.467461109 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.467912912 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.467926025 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.470155954 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.470439911 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.470462084 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.471965075 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.472372055 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.472372055 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.472464085 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.472486019 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.478708982 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.519341946 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.598742008 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.598752975 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.598787069 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.598835945 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.598843098 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.598858118 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.598870993 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.598916054 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.598948956 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.599107027 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.599201918 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.599225998 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.599334002 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.599490881 CET	49819	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:41.599499941 CET	443	49819	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:41.600684881 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.600684881 CET	49835	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.600722075 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.600744963 CET	443	49835	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.604687929 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.604712963 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.604902983 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.605053902 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:41.605066061 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:41.611406088 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:41.611416101 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:41.613682032 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:41.613918066 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:41.613930941 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:41.618237019 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.618294001 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.618329048 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.618365049 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.618604898 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.618628979 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.618638992 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.618675947 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.618704081 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.618710995 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.619496107 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.619502068 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.661659956 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.661731005 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.661757946 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.661801100 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.662028074 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.662040949 CET	443	49817	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.662077904 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.662270069 CET	49817	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.663202047 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.663209915 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.663245916 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.707063913 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.719187021 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.719280005 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:41.719836950 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.719836950 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:41.727746964 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.735076904 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.735183954 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:41.735208035 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.735498905 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.735498905 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:41.808630943 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.809006929 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.809020042 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.809366941 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.809824944 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.809824944 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.809887886 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.846896887 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.847152948 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.847167969 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.847661018 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.848156929 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.848156929 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.848236084 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:41.899693966 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:41.947004080 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.025947094 CET	49834	443	192.168.2.7	63.140.62.27
Oct 30, 2024 03:47:42.025973082 CET	443	49834	63.140.62.27	192.168.2.7
Oct 30, 2024 03:47:42.043354988 CET	49828	443	192.168.2.7	46.228.164.13
Oct 30, 2024 03:47:42.043379068 CET	443	49828	46.228.164.13	192.168.2.7
Oct 30, 2024 03:47:42.120239973 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.120259047 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.120332956 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.120357990 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.120490074 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.121661901 CET	49825	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.121681929 CET	443	49825	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.126688004 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.129086971 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.129105091 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.131355047 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.131361008 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.138233900 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.138689041 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.138704062 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.139334917 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.139339924 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.171435118 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.171489954 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.171643972 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.171663046 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.171972990 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.173002958 CET	49826	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.173011065 CET	443	49826	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.177462101 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.178699970 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.178699970 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.178713083 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.178720951 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.200545073 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.202909946 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.202928066 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.203588009 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.203593016 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.256973982 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.257044077 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.257133007 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.258430004 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.258443117 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.258476973 CET	49841	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.258481979 CET	443	49841	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.262037039 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.262109995 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.262196064 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.266324043 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.266479969 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.266546965 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.269985914 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.270025015 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.270257950 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.270263910 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.270272970 CET	49843	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.270277023 CET	443	49843	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.289244890 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.289272070 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.289350986 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.289551973 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.289580107 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.307240963 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.307559967 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.307614088 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.319957018 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.319966078 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.319976091 CET	49844	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.319979906 CET	443	49844	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.327327013 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.327367067 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.327442884 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.327609062 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.327627897 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.331932068 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.332062960 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.332113028 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.332583904 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.332595110 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.332607031 CET	49845	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.332612038 CET	443	49845	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.336564064 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.336592913 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.336677074 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.337018967 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.337045908 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.346328020 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.346745968 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.346771955 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.347481012 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.347486973 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.359989882 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.360244036 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.360265970 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.360764027 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.363471985 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.363571882 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.363744020 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.407339096 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.451069117 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.451842070 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.451860905 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.452361107 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.457289934 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.458009958 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.458132982 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.458302975 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.458311081 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.460108042 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.460179090 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.460510015 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.478852987 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.479065895 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.479126930 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.503343105 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.536051035 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.536355019 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.536977053 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.536995888 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.592510939 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.676682949 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.676739931 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.676817894 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.676861048 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.677227020 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.677284002 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.677300930 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.677371025 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.677423954 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.771198034 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.771262884 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.771331072 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.771358967 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.771429062 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.771483898 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.790676117 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.833740950 CET	49836	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.833771944 CET	443	49836	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.845618010 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.845626116 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.846220016 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.846308947 CET	443	49849	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:42.846384048 CET	49849	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:42.877542019 CET	49838	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:42.877568960 CET	443	49838	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:42.890115976 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.890136957 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.890171051 CET	49848	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.890177011 CET	443	49848	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.899322033 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.899353027 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:42.899416924 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.899903059 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:42.899913073 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.211815119 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.212423086 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.212485075 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.213393927 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.213411093 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.217180967 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.217859983 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.217875004 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.218609095 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.218614101 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.218806028 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.219260931 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.219296932 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.219774008 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.219785929 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.224448919 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.225461006 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.225493908 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.226080894 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.226093054 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.341821909 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.341909885 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.341996908 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.346456051 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.346493959 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.346544981 CET	49855	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.346561909 CET	443	49855	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.347692966 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.348009109 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.348062038 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.349715948 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.349864006 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.349929094 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.354026079 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.354044914 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.354060888 CET	49857	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.354068041 CET	443	49857	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.357049942 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.357049942 CET	49856	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.357079029 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.357104063 CET	443	49856	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.361164093 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.361367941 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.361424923 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.381244898 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.381246090 CET	49858	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.381264925 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.381285906 CET	443	49858	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.389714003 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.389730930 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.389817953 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.392241955 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.392256021 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.392354965 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.392560005 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.392574072 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.393707991 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.393718004 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.393779039 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.394107103 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.394119024 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.394887924 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.394910097 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.395967007 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.395988941 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.396145105 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.399333000 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.399346113 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.814054012 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.815493107 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.815515995 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.817236900 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.817243099 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.943640947 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.943790913 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.943852901 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.944952011 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.944973946 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.944986105 CET	49861	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.944991112 CET	443	49861	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.953809977 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.953824997 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:43.953883886 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.954466105 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:43.954478025 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.126137972 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.126315117 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.144278049 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.147963047 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.175124884 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.175123930 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.191128969 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.191167116 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.216342926 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.216348886 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.222106934 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.222112894 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.232928038 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.232933044 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.235450983 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.235460997 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.240235090 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.240238905 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.241255045 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.241261005 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.242830992 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.242835999 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.243872881 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.243877888 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.347522974 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.348014116 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.348073006 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.349473000 CET	49865	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.349481106 CET	443	49865	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.357256889 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.357307911 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.357383966 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.357670069 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.357685089 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.360692024 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.360774994 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.360908031 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.361572981 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.361583948 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.361593008 CET	49868	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.361598969 CET	443	49868	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.367249012 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.367264032 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.367376089 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.368851900 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.368864059 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.370297909 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.370817900 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.370874882 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.370891094 CET	49866	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.370898008 CET	443	49866	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.372391939 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.372555017 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.372608900 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.372888088 CET	49867	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.372894049 CET	443	49867	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.381786108 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.381798983 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.381865978 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.382046938 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.382059097 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.573899031 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.573913097 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.574007034 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.591415882 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:44.591444016 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:44.591727972 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:44.594027996 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:44.594043970 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:44.598789930 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.598817110 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.602477074 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:44.602490902 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:44.602648020 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:44.603116035 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:44.603130102 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:44.690083981 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.692513943 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.692537069 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.693588972 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.693593025 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.822093964 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.822279930 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.822348118 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.822742939 CET	49870	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.822751045 CET	443	49870	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.828372002 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.828387976 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:44.828569889 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.828932047 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:44.828944921 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.104852915 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.116434097 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.119057894 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.182601929 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.245162010 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.245201111 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.248718023 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.248733997 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.287831068 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.287852049 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.288301945 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.288307905 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.304438114 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.304457903 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.305346012 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.305351019 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.322293997 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.340718031 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.340732098 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.344387054 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.344392061 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.377576113 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.377661943 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.377784967 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.378040075 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.378077030 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.378103971 CET	49871	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.378118992 CET	443	49871	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.384294987 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.384347916 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.384563923 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.385010958 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.385040998 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.415920973 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.416088104 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.416155100 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.416378021 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.416385889 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.416395903 CET	49872	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.416400909 CET	443	49872	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.420219898 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.420245886 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.420315981 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.420557022 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.420571089 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.430032015 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.430154085 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.430449009 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.430465937 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.430474997 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.430484056 CET	49873	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.430489063 CET	443	49873	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.432969093 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.432992935 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.433104992 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.433248043 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.433252096 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.462043047 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.466403008 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.466419935 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.467283010 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.467356920 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.467397928 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.468070984 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.468127966 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.468678951 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.468688965 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.470861912 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.470931053 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.471173048 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.471183062 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.471191883 CET	49874	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.471195936 CET	443	49874	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.474355936 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.474450111 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.474594116 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.474805117 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.474842072 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.481364965 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.481602907 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.481611967 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.483040094 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.483103991 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.551778078 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.552818060 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.552844048 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.553677082 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.553682089 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.563050032 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.563230991 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.563272953 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.603368998 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.627676010 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.678536892 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.678683996 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.678867102 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.684031963 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.684041977 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.736411095 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:45.736423016 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:45.736506939 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:45.736731052 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:45.736746073 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:45.745394945 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.745426893 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.745461941 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.745515108 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.745527983 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.745625973 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.745882988 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.753788948 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:45.753806114 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:45.753993988 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:45.755656004 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:45.755667925 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:45.768723011 CET	49877	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.768729925 CET	443	49877	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.774336100 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.774343967 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.774465084 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.778218985 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.778232098 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.788825989 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.840234995 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.843187094 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.843204975 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.843362093 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.846549988 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:45.846565008 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:45.857510090 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.857536077 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.876979113 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.877033949 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.879220009 CET	49875	443	192.168.2.7	142.250.185.98
Oct 30, 2024 03:47:45.879234076 CET	443	49875	142.250.185.98	192.168.2.7
Oct 30, 2024 03:47:45.901345015 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:45.901420116 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:45.901629925 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:45.902590036 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:45.902622938 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:45.972254992 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:45.972336054 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.996794939 CET	49876	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:45.996813059 CET	443	49876	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.123016119 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.138140917 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.138221979 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.139074087 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.139081001 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.156205893 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.158832073 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.158855915 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.160231113 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.160237074 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.208076954 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.208699942 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.208724976 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.209563017 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.209572077 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.216564894 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.218373060 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.218420029 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.219753027 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.219767094 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.264466047 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.264784098 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.264863968 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.266782999 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.266825914 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.266855955 CET	49878	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.266870975 CET	443	49878	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.278361082 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.278373957 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.278450012 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.278605938 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.278619051 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.293606997 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.293793917 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.293876886 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.294063091 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.294071913 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.294094086 CET	49879	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.294097900 CET	443	49879	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.297748089 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.297800064 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.297954082 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.298871994 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.298912048 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.342881918 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.343040943 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.343152046 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.344049931 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.344068050 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.344113111 CET	49880	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.344120979 CET	443	49880	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.349138021 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.349152088 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.349531889 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.349811077 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.349822998 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.350234985 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.350837946 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.350939989 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.350939989 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.350989103 CET	49881	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.351012945 CET	443	49881	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.354291916 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.354334116 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.354486942 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.354618073 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.354645014 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.356417894 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.356987953 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.357000113 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.357301950 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.357373953 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.357891083 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.357948065 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.359206915 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.359261036 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.360235929 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.360246897 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.486284018 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.504630089 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.505450964 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.505522013 CET	443	49884	216.239.32.181	192.168.2.7
Oct 30, 2024 03:47:46.505589008 CET	49884	443	192.168.2.7	216.239.32.181
Oct 30, 2024 03:47:46.593383074 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.593862057 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.593873978 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.594866991 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.595777035 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.595794916 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.596654892 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.596731901 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.596817017 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.596822977 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.599632978 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.599911928 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.600115061 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.600121021 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.628654003 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.628952026 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:46.628962040 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.629468918 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.630270004 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:46.630350113 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.630413055 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:46.675335884 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.684427023 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.684485912 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:46.725192070 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.725446939 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.725584984 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.725613117 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.725626945 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.725636959 CET	49887	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.725641966 CET	443	49887	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.728610039 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.728634119 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.728758097 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.728945971 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:46.728959084 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:46.758631945 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:46.758917093 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:46.758987904 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:46.759284019 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:46.759789944 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:46.759860992 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:46.760046959 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:46.803356886 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:46.839306116 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.839835882 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.839912891 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.840267897 CET	443	49885	74.125.133.156	192.168.2.7
Oct 30, 2024 03:47:46.840276003 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.840322971 CET	49885	443	192.168.2.7	74.125.133.156
Oct 30, 2024 03:47:46.889307976 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.986723900 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:46.986731052 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.987334013 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:46.987432003 CET	443	49886	142.250.185.66	192.168.2.7
Oct 30, 2024 03:47:46.987557888 CET	49886	443	192.168.2.7	142.250.185.66
Oct 30, 2024 03:47:47.012773991 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.013391972 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.013406038 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.013933897 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.013948917 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.021620035 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:47.045433044 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.045948029 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.046010971 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.046432018 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.046444893 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.087888956 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.088460922 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.088481903 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.088531971 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.089062929 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.089067936 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.089201927 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.089251995 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.089554071 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.089565992 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.110632896 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:47.110656023 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:47.111020088 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:47.111064911 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:47.111197948 CET	443	49888	216.58.206.68	192.168.2.7
Oct 30, 2024 03:47:47.111262083 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:47.111282110 CET	49888	443	192.168.2.7	216.58.206.68
Oct 30, 2024 03:47:47.141501904 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.141767025 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.141834974 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.142184019 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.142205000 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.142220020 CET	49891	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.142225981 CET	443	49891	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.145433903 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.145471096 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.145550013 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.145750999 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.145762920 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.176220894 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.176578999 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.176714897 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.176795959 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.176795959 CET	49892	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.176840067 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.176872015 CET	443	49892	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.180828094 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.180867910 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.180962086 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.181149006 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.181168079 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.216763020 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.216892004 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.216957092 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.217103958 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.217112064 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.217123032 CET	49893	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.217128038 CET	443	49893	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.220045090 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.220081091 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.220145941 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.220479012 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.220493078 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.222242117 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.222313881 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.222383022 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.222502947 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.222522974 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.222570896 CET	49894	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.222587109 CET	443	49894	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.224647045 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.224662066 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.224792957 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.224930048 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.224945068 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.331274986 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:47.331295013 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:47.331506968 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:47.331883907 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:47.331897974 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:47.469136953 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.643722057 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.919964075 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.935117960 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.952531099 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.972810030 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.976471901 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.976686001 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.993391991 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.993413925 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.994457006 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.994465113 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.994925976 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.994947910 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:47.995861053 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:47.995866060 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.008255959 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.008275032 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.008888006 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.008899927 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.009671926 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.009685040 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.011430025 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.011435032 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.012161016 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.012191057 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.013020992 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.013031960 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.122709990 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.122859001 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.122921944 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.124706984 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.124871016 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.124937057 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.139059067 CET	49895	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.139067888 CET	443	49895	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.140809059 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.140883923 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.140993118 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.141462088 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.141482115 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.141496897 CET	49898	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.141504049 CET	443	49898	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.146502972 CET	49897	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.146528959 CET	443	49897	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.147058964 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.147773981 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.147965908 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.154361010 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.154531002 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.154609919 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.156912088 CET	49896	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.156930923 CET	443	49896	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.159141064 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.159141064 CET	49899	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.159166098 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.159188986 CET	443	49899	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.160449982 CET	49677	443	192.168.2.7	20.50.201.200
Oct 30, 2024 03:47:48.167248964 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.167273045 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.167352915 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.169915915 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.169964075 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.170176983 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.171272039 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.171282053 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.171408892 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.171818018 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.171833038 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.174505949 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.174546003 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.174616098 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.174738884 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.174767017 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.175524950 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.175544024 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.175816059 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.175829887 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.180841923 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.180870056 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.180985928 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.181230068 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.181242943 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.213781118 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:48.213881016 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:48.213972092 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:48.214529991 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:48.214565039 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:48.587527990 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.615571022 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:48.615581036 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.615864038 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.616763115 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:48.616815090 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.617286921 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:48.659337044 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.908962011 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.916038990 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.918196917 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.918826103 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.918842077 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.918885946 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.918899059 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:48.918932915 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.918946028 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:48.921598911 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.941751957 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.941765070 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.944212914 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.944216967 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.945074081 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.945102930 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.946454048 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.946465015 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.947333097 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.947344065 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.949048996 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.949058056 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.949769020 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.949790001 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.951142073 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.951147079 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.953167915 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.953192949 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.954108953 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:48.954116106 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:48.959356070 CET	49900	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:48.959366083 CET	443	49900	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:48.975147963 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:48.975171089 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:48.975236893 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:48.975779057 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:48.975788116 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:49.067878962 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.068100929 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.068157911 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.070496082 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.070712090 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.070770025 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.070800066 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.070810080 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.070820093 CET	49903	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.070825100 CET	443	49903	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.071006060 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.071265936 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.071721077 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.071793079 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.071805000 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.071805954 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.071805954 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.072226048 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.072339058 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.072356939 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.072402954 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.074630976 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.074667931 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.074744940 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.074908972 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.074924946 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.074954033 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.074969053 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.075026035 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.075103998 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.075117111 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.076189995 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.076401949 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.076457977 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.076493979 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.076508999 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.076519966 CET	49905	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.076524973 CET	443	49905	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.077037096 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.077212095 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.077272892 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.077357054 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.077362061 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.077370882 CET	49901	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.077377081 CET	443	49901	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.078986883 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.078999043 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.079099894 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.079235077 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.079246998 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.080125093 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.080157995 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.080225945 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.080286980 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.080390930 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.080410957 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.080487013 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.080595970 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.080596924 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.080630064 CET	49902	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.080640078 CET	443	49902	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.083199978 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.083218098 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.083281994 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.083395004 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.083410978 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.148349047 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.148377895 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.321649075 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.332422018 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.437500954 CET	49904	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.437536955 CET	443	49904	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.437659025 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.437694073 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.443306923 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.443432093 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.443921089 CET	443	49906	142.250.186.132	192.168.2.7
Oct 30, 2024 03:47:49.444015026 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.444015980 CET	49906	443	192.168.2.7	142.250.186.132
Oct 30, 2024 03:47:49.803930998 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.804861069 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.804882050 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.805058002 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.805064917 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.813586950 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.814058065 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.814071894 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.814801931 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.814806938 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.823519945 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.824094057 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.824139118 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.824161053 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.824311972 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.824316025 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.824917078 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.824917078 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.824934959 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.824948072 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.827275038 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.827661991 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.827689886 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.827969074 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.827975035 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.930666924 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.930811882 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.931123018 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.931123018 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.931310892 CET	49911	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.931339025 CET	443	49911	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.934967995 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.934989929 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.935079098 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.935272932 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.935286999 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.943798065 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.943984985 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.944077015 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.944077015 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.944473028 CET	49910	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.944483995 CET	443	49910	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.946347952 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.946367979 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.946505070 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.946585894 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.946594000 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.952975035 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.953057051 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.955519915 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.955519915 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.955934048 CET	49913	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.955940008 CET	443	49913	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.957372904 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.957506895 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.957688093 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.957990885 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.957992077 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.958003044 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.958014011 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.958034992 CET	49909	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.958043098 CET	443	49909	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.958085060 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.959019899 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.959033012 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.959631920 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.959769964 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.960098028 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.960910082 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.960906982 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.960916042 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.960956097 CET	49912	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.960961103 CET	443	49912	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.960998058 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.961220026 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.961401939 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.961437941 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.963094950 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.963104010 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:49.963531017 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.963728905 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:49.963746071 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.237906933 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.238368034 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:50.238380909 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.238699913 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.241698980 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:50.241756916 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.241898060 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:50.287329912 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.543451071 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.543476105 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.543525934 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.543540955 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:50.543580055 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:50.545928955 CET	49908	443	192.168.2.7	18.167.161.134
Oct 30, 2024 03:47:50.545938969 CET	443	49908	18.167.161.134	192.168.2.7
Oct 30, 2024 03:47:50.674206972 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.674839973 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.674865007 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.675456047 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.675462008 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.677469969 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.677851915 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.677871943 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.678298950 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.678303957 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.712256908 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.712692022 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.712713003 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.713201046 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.713207006 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.714225054 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.714577913 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.714662075 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.714879990 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.714956045 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.714972019 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.715205908 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.715220928 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.715567112 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.715572119 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.802768946 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.802982092 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.803165913 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.803196907 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.803205013 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.803220987 CET	49914	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.803225040 CET	443	49914	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.804555893 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.804663897 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.804811954 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.804970026 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.804980040 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.804987907 CET	49915	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.804992914 CET	443	49915	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.806693077 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.806734085 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.806838989 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.806967974 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.806981087 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.807010889 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.807041883 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.807101011 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.807187080 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.807197094 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.842994928 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.843619108 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.843663931 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.843729973 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.843735933 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.843765974 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.843774080 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.843791962 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.843827963 CET	49916	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.843832016 CET	443	49916	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.843928099 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.843967915 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.843997002 CET	49917	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.844017982 CET	443	49917	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.846136093 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.846153975 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.846395016 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.846421957 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.846431017 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.846483946 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.846636057 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.846647978 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.846676111 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.846688986 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.849919081 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.850305080 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.850507975 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.850548029 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.850553036 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.850558996 CET	49918	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.850562096 CET	443	49918	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.852349997 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.852389097 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:50.852569103 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.852811098 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:50.852828026 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.540061951 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.540684938 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.540704012 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.541203976 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.541208982 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.556668043 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.557123899 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.557143927 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.557569981 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.557575941 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.583594084 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.583977938 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.583993912 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.584381104 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.584386110 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.588128090 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.588486910 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.588506937 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.588896990 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.588902950 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.620815992 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.621526003 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.621541023 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.622137070 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.622142076 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.668929100 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.669100046 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.669162989 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.669533968 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.669563055 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.669579983 CET	49921	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.669588089 CET	443	49921	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.673552036 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.673583031 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.673779964 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.673999071 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.674015045 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.689517021 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.689567089 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.689693928 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.689774990 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.689830065 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.689858913 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.689886093 CET	49922	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.689901114 CET	443	49922	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.692694902 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.692718983 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.692780018 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.693475962 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.693489075 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.713658094 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.713740110 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.713978052 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.714112043 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.714123011 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.714132071 CET	49923	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.714135885 CET	443	49923	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.717470884 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.717483044 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.717550993 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.717701912 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.717714071 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.717947960 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.717999935 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.718053102 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.718064070 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.718128920 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.718184948 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.718209028 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.718224049 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.718224049 CET	49925	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.718234062 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.718242884 CET	443	49925	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.720494986 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.720505953 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.720571041 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.720736027 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.720747948 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.758033991 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.758225918 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.758477926 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.758517981 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.758531094 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.758541107 CET	49924	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.758546114 CET	443	49924	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.760581017 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.760607958 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:51.760790110 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.760942936 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:51.760956049 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.418796062 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.419365883 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.419399977 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.420093060 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.420098066 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.440238953 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.440849066 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.440871954 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.441390991 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.441395998 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.455439091 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.455912113 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.455926895 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.456312895 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.456315994 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.496139050 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.496648073 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.496669054 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.497112989 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.497118950 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.549292088 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.549354076 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.549417019 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.549434900 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.549496889 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.549501896 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.549566984 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.549618959 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.550190926 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.550205946 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.550215006 CET	49928	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.550220013 CET	443	49928	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.554466963 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.554531097 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.554888964 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.555896044 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.555916071 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.570703983 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.570736885 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.570797920 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.570807934 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.570835114 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.570979118 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.571265936 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.571279049 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.571294069 CET	49929	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.571297884 CET	443	49929	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.574588060 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.574610949 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.574743032 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.574975014 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.574986935 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.584516048 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.584700108 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.584868908 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.585565090 CET	49931	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.585570097 CET	443	49931	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.588663101 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.588682890 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.588859081 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.589035034 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.589047909 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.625094891 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.625130892 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.625228882 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.625293016 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.625511885 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.625519991 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.625662088 CET	49932	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.625667095 CET	443	49932	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.625762939 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.625777006 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.626228094 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.626231909 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.629298925 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.629311085 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.629378080 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.629517078 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.629528999 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.755031109 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.755135059 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.755196095 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.755534887 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.755541086 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.755551100 CET	49930	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.755554914 CET	443	49930	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.758701086 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.758709908 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:52.758773088 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.758943081 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:52.758959055 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.302190065 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.302804947 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.302843094 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.303324938 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.303332090 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.332850933 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.333338022 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.333369970 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.333908081 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.333914042 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.343847036 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.344285011 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.344305992 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.344690084 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.344695091 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.351371050 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.351732969 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.351752996 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.352288961 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.352293968 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.436119080 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.436269999 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.436347008 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.436542988 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.436566114 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.436577082 CET	49935	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.436583042 CET	443	49935	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.440152884 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.440176010 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.440243959 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.440407038 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.440418005 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.463109016 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.463277102 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.463426113 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.463502884 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.463517904 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.463538885 CET	49937	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.463548899 CET	443	49937	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.466350079 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.466382027 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.466543913 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.466747046 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.466761112 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.478390932 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.478538036 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.478621960 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.478688002 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.478699923 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.478708982 CET	49936	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.478713036 CET	443	49936	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.480500937 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.480633020 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.480703115 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.480979919 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.480983973 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.480990887 CET	49938	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.480993986 CET	443	49938	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.481193066 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.481686115 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.481718063 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.481808901 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.481841087 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.481956959 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.482106924 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.482117891 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.482680082 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.482692003 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.484782934 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.484843969 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.484930992 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.485121012 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.485142946 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.609622002 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.609679937 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.609822035 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.609972000 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.609987020 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.609996080 CET	49939	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.610001087 CET	443	49939	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.612843990 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.612868071 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:53.613048077 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.613218069 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:53.613234043 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.173913956 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.174912930 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.174968004 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.175756931 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.175771952 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.205651045 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.206165075 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.206192970 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.206583023 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.206588984 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.218143940 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.218549013 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.218590975 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.218931913 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.218945980 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.229806900 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.230185986 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.230209112 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.230655909 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.230663061 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.304982901 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.305141926 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.305227995 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.305409908 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.305409908 CET	49942	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.305443048 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.305465937 CET	443	49942	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.308734894 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.308765888 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.308832884 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.308994055 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.309006929 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.334904909 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.335053921 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.335123062 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.335201025 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.335227966 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.335237980 CET	49943	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.335242987 CET	443	49943	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.337774038 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.337810993 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.337881088 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.338057041 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.338069916 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.346858978 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.347021103 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.347088099 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.347682953 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.347718954 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.347748995 CET	49945	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.347764969 CET	443	49945	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.350527048 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.350541115 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.350708961 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.350975037 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.350985050 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.359962940 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.359987020 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.360024929 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.360059023 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.360136032 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.360274076 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.360289097 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.360300064 CET	49944	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.360306025 CET	443	49944	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.362938881 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.362974882 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.363058090 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.363332033 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.363342047 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.375272989 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.375665903 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.375680923 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.376077890 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.376082897 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.508089066 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.508126974 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.508178949 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.508234024 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.508496046 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.508511066 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.508546114 CET	49946	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.508552074 CET	443	49946	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.511951923 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.511997938 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.512103081 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.512357950 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:54.512372971 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:54.934345961 CET	443	49790	104.98.116.138	192.168.2.7
Oct 30, 2024 03:47:54.934429884 CET	49790	443	192.168.2.7	104.98.116.138
Oct 30, 2024 03:47:55.045870066 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.046842098 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.046861887 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.047789097 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.047794104 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.080945015 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.081631899 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.081650972 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.082143068 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.082148075 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.088675022 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.089080095 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.089121103 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.089484930 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.089493990 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.099128962 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.099546909 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.099577904 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.099936008 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.099941015 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.175441980 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.175774097 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.175935030 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.175970078 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.175971031 CET	49949	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.175987959 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.175997019 CET	443	49949	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.179455042 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.179486990 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.179569960 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.179790020 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.179804087 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.210894108 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.211055040 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.211174011 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.211174011 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.211236954 CET	49951	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.211242914 CET	443	49951	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.213670015 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.213705063 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.213891983 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.214042902 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.214056015 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.221400976 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.221559048 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.221657991 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.221709013 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.221734047 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.221749067 CET	49950	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.221757889 CET	443	49950	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.224060059 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.224123955 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.224386930 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.224386930 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.224473953 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.228452921 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.228524923 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.228637934 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.228657961 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.228693962 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.228755951 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.228770971 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.228780031 CET	49952	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.228785038 CET	443	49952	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.230856895 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.230869055 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.230935097 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.231184959 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.231195927 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.246634007 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.247170925 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.247203112 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.248152971 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.248158932 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.375936031 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.376143932 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.376221895 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.376475096 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.376497030 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.376509905 CET	49953	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.376514912 CET	443	49953	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.381633997 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.381680965 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.381861925 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.382081032 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.382102013 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.931183100 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.931977034 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.931997061 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.932610989 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.932616949 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.944921970 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.945494890 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.945535898 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.946005106 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.946012974 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.966017008 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.967281103 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.967299938 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.967792988 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.967801094 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.998665094 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.999079943 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.999097109 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:55.999646902 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:55.999650955 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.062858105 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.064207077 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.064285040 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.064390898 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.064416885 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.064443111 CET	49959	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.064449072 CET	443	49959	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.070210934 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.070255995 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.070339918 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.070550919 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.070565939 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.072870970 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.072940111 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.073009968 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.073045015 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.073070049 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.073168039 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.073200941 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.073214054 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.073227882 CET	49961	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.073235035 CET	443	49961	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.075645924 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.075675964 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.075737953 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.076404095 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.076419115 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.098675013 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.098814011 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.098906994 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.098977089 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.098988056 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.099009037 CET	49962	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.099014997 CET	443	49962	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.101526976 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.101547956 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.101613998 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.101784945 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.101797104 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.134731054 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.134980917 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.135039091 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.142169952 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.142196894 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.142241955 CET	49960	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.142249107 CET	443	49960	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.144617081 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.145400047 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.145418882 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.147139072 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.147145033 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.148443937 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.148473024 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.148636103 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.148972034 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.148982048 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.222191095 CET	49970	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:56.222228050 CET	443	49970	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:56.222378969 CET	49970	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:56.223220110 CET	49970	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:56.223234892 CET	443	49970	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:56.282469034 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.282499075 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.282546043 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.282582998 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.282654047 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.690323114 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.690403938 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.690443993 CET	49963	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.690463066 CET	443	49963	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.711293936 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.711338997 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.713845968 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.714382887 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.714401007 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.816948891 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.817235947 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.818531990 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.818566084 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.819544077 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.819555998 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.820218086 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.820241928 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.822390079 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.822397947 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.847296000 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.853749037 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.853807926 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.854346991 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.854365110 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.896212101 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.897336960 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.897336960 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.897387981 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.897407055 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.946850061 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.947011948 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.947254896 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.947292089 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.947292089 CET	49967	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.947310925 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.947325945 CET	443	49967	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.951018095 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.951056957 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.951064110 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.951193094 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.951211929 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.951337099 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.951392889 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.951394081 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.951407909 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.951417923 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.951445103 CET	49966	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.951452017 CET	443	49966	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.953561068 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.953602076 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.953758001 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.953838110 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.953850031 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.986135006 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.986203909 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.986304998 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.986393929 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.986393929 CET	49968	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.986413956 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.986426115 CET	443	49968	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.988833904 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.988863945 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:56.989093065 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.989331007 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:56.989343882 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.027086020 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.027148008 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.027242899 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.027261972 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.027282000 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.027354002 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.027437925 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.027437925 CET	49969	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.027452946 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.027461052 CET	443	49969	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.032301903 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.032320976 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.032779932 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.032779932 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.032804012 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.447271109 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.447988033 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.448003054 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.448894024 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.448905945 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.516444921 CET	443	49970	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:57.516845942 CET	49970	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:57.516868114 CET	443	49970	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:57.517419100 CET	443	49970	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:57.536535978 CET	49970	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:57.536659956 CET	443	49970	18.166.199.244	192.168.2.7
Oct 30, 2024 03:47:57.578754902 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.578830004 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.578881025 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.580842018 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.580856085 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.580867052 CET	49973	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.580871105 CET	443	49973	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.585458040 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.585481882 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.585531950 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.585776091 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.585783005 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.585911036 CET	49970	443	192.168.2.7	18.166.199.244
Oct 30, 2024 03:47:57.682028055 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.682662010 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.682686090 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.683238983 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.683243990 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.685676098 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.686096907 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.686115980 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.686693907 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.686698914 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.710673094 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.711061954 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.711074114 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.711489916 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.711493015 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.774362087 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.775223970 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.775245905 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.775971889 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.775976896 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.810380936 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.810573101 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.810637951 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.810787916 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.810801029 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.810811996 CET	49977	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.810817003 CET	443	49977	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.816495895 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.817765951 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.817812920 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.818279982 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.818322897 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.818355083 CET	49978	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.818371058 CET	443	49978	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.818391085 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.820585966 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.820596933 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.823559999 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.823570013 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.823620081 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.824028015 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.824038982 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.840126038 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.840192080 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.840305090 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.840311050 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.840342045 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.840389967 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.844757080 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.844760895 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.844788074 CET	49979	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.844791889 CET	443	49979	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.851982117 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.852019072 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.852082968 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.852986097 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.853003979 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.909378052 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.909552097 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.909624100 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.909759998 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.909776926 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.909787893 CET	49980	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.909792900 CET	443	49980	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.913408995 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.913496971 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:57.913589001 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.913821936 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:57.913856030 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.314738035 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.315335989 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.315351009 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.321254969 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.321260929 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.447020054 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.447072029 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.447345972 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.448013067 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.448023081 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.448055983 CET	49982	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.448061943 CET	443	49982	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.461780071 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.461796999 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.466182947 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.466844082 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.466851950 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.554543972 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.555835962 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.555919886 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.556796074 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.556811094 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.599211931 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.599430084 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.600393057 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.600425959 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.601460934 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.601473093 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.602622986 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.602622986 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.602643967 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.602652073 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.656902075 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.658060074 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.658111095 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.659617901 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.659631014 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.684742928 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.684789896 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.684871912 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.684915066 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.685343981 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.685662985 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.685662985 CET	49984	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.685703993 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.685731888 CET	443	49984	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.701628923 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.701668978 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.705976009 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.706212044 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.706228018 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.731000900 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.731091022 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.733675957 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.736759901 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.736928940 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.737025976 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.787792921 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.787945032 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.789545059 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.993520975 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.993555069 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.993587971 CET	49985	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.993593931 CET	443	49985	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.997970104 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.997970104 CET	49983	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:58.998019934 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:58.998049021 CET	443	49983	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.184320927 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.231667042 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.241684914 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.241684914 CET	49986	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.241774082 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.241854906 CET	443	49986	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.340240955 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.340264082 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.341501951 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.341506958 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.394150019 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.394215107 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.394289017 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.396559000 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.396590948 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.396658897 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.399743080 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.399770021 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.399837971 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.402061939 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.402101994 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.402220964 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.402235985 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.402467966 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.402482986 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.437180042 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.456221104 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.456248045 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.458059072 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.458065033 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.464463949 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.464541912 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.464589119 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.472016096 CET	49987	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.472031116 CET	443	49987	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.583163023 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.583220005 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.583272934 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.583278894 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.583328962 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.603331089 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.603353024 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.603363991 CET	49988	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.603370905 CET	443	49988	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.610675097 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.610728979 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.610804081 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.632041931 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.632075071 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.642673016 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.642712116 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:47:59.642771006 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.642914057 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:47:59.642926931 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.127398014 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.133708954 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.148771048 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.150537014 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.150573015 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.151832104 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.151844025 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.152753115 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.152791023 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.153610945 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.153625011 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.197150946 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.197216988 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.198599100 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.198620081 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.279583931 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.279699087 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.279870033 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.281927109 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.282021999 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.282074928 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.327545881 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.327637911 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.327753067 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.327955008 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.341402054 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.341438055 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.341476917 CET	49990	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.341484070 CET	443	49990	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.342588902 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.342588902 CET	49991	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.342633963 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.342650890 CET	443	49991	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.349525928 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.349553108 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.349582911 CET	49989	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.349594116 CET	443	49989	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.368325949 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.368381023 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.368804932 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.376827955 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.379084110 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.381088972 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.381122112 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.381925106 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.381946087 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.382419109 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.382421970 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.382425070 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.382442951 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.382744074 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.382750988 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.384150028 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.384190083 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.384325027 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.384721994 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.384742975 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.385965109 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.386010885 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.386121035 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.389463902 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.389477015 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.508784056 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.509459019 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.509608030 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.510184050 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.510200977 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.510365963 CET	49993	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.510370970 CET	443	49993	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.514491081 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.514517069 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.514813900 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.514813900 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.514842033 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.517932892 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.519479036 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.519525051 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.519624949 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.521228075 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.521228075 CET	49992	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.521248102 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.521260977 CET	443	49992	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.529712915 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.529736042 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:00.529843092 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.530237913 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:00.530252934 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.112428904 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.115443945 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.115443945 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.115473032 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.115492105 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.122662067 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.123713970 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.123735905 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.124202967 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.124207973 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.125168085 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.126424074 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.126445055 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.126854897 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.126861095 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.241684914 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.241800070 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.241924047 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.242036104 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.242182970 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.242204905 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.242255926 CET	49994	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.242263079 CET	443	49994	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.245523930 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.245549917 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.245708942 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.245852947 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.245861053 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.252187967 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.252228975 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.252295971 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.252377033 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.252377033 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.252450943 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.252465963 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.252499104 CET	49996	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.252506018 CET	443	49996	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.252583981 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.253551006 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.253582954 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.253875971 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.253880978 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.255295992 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.255376101 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.255383015 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.255414009 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.255491018 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.255491018 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.255657911 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.255669117 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.255692005 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.255692005 CET	49995	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.255700111 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.255706072 CET	443	49995	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.257855892 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.257869959 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.258021116 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.258135080 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.258147955 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.318377018 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.325898886 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.325913906 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.327054977 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.327060938 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.403220892 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.403330088 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.403402090 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.403960943 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.404019117 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.404052019 CET	49999	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.404071093 CET	443	49999	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.409658909 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.409727097 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.409806967 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.410161018 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.410212040 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.458144903 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.458287001 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.458369970 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.458807945 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.458827019 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.458888054 CET	50000	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.458893061 CET	443	50000	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.464725971 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.464766979 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.464834929 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.465225935 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:01.465243101 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.981081009 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.991177082 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:01.995502949 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.024499893 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.039907932 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.039907932 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.042191982 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.042206049 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.044012070 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.044015884 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.044717073 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.044729948 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.046431065 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.046437979 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.047200918 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.047208071 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.048567057 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.048574924 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.144970894 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.151355028 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.151391983 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.152229071 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.152245998 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.177429914 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.177475929 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.177531958 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.177541018 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.177578926 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.177645922 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.177800894 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.177851915 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.177922964 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.178088903 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.178138018 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.178189039 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.178209066 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.178224087 CET	50002	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.178230047 CET	443	50002	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.178435087 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.178452015 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.178464890 CET	50003	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.178472042 CET	443	50003	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.186252117 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.186259031 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.186270952 CET	50001	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.186275959 CET	443	50001	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.192161083 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.192195892 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.192270994 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.194092989 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.194113016 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.194123030 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.195700884 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.195727110 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.197226048 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.197232008 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.199888945 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.199913979 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.199980021 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.200402975 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.200412035 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.204834938 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.204874039 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.204942942 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.205096006 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.205106974 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.278279066 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.278356075 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.278434992 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.278461933 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.278482914 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.278531075 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.279088020 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.279103994 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.279114008 CET	50004	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.279123068 CET	443	50004	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.287684917 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.287789106 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.287874937 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.289045095 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.289097071 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.324182034 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.324253082 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.324315071 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.327411890 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.327429056 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.327440977 CET	50005	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.327449083 CET	443	50005	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.330768108 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.330804110 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.331056118 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.331332922 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.331343889 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.915563107 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.917229891 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.917257071 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.918859959 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.918865919 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.948973894 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.949697971 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.949721098 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.950412035 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.950417042 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.955384970 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.955881119 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.955909014 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:02.956685066 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:02.956688881 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.026866913 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.027977943 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.028053045 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.028568983 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.028589010 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.045293093 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.045553923 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.045634985 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.045718908 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.045741081 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.045753956 CET	50006	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.045758963 CET	443	50006	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.049489021 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.049566031 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.049670935 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.049870014 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.049895048 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.080357075 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.080502033 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.080580950 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.080796957 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.080816984 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.080828905 CET	50007	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.080835104 CET	443	50007	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.083975077 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.084021091 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.084208012 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.084435940 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.084449053 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.098984957 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.099458933 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.099482059 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.100007057 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.100012064 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.136184931 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.136230946 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.136287928 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.136287928 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.136337042 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.136560917 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.136574984 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.136584997 CET	50008	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.136590958 CET	443	50008	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.139868975 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.139908075 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.139978886 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.140301943 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.140322924 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.158159018 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.158330917 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.158435106 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.158464909 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.158478022 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.158488989 CET	50009	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.158495903 CET	443	50009	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.160896063 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.160933018 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.161068916 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.161293030 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.161308050 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.235878944 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.235955000 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.236021996 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.236047983 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.236072063 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.236133099 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.236310005 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.236323118 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.236332893 CET	50010	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.236337900 CET	443	50010	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.239674091 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.239713907 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.239773989 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.239937067 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.239945889 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.823281050 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.824012041 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.824033976 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.824526072 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.824531078 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.826117039 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.826690912 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.826725960 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.827086926 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.827091932 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.877248049 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.877906084 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.877938032 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.878405094 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.878412962 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.902218103 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.902817965 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.902857065 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.903512001 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.903517962 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.956794977 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.956882000 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.956940889 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.957153082 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.957176924 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.957233906 CET	50012	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.957238913 CET	443	50012	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.960438967 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.960493088 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.960747004 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.960937977 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.960952997 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.962996960 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.963171959 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.963285923 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.963327885 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.963327885 CET	50011	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.963346004 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.963356018 CET	443	50011	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.965953112 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.965996027 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:03.966146946 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.966279030 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:03.966290951 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.005639076 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.006114006 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.006149054 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.006843090 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.006854057 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.032838106 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.032941103 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.033143044 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.033576012 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.033592939 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.033603907 CET	50014	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.033610106 CET	443	50014	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.043075085 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.043116093 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.043178082 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.043385029 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.043396950 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.141709089 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.141890049 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.141947985 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.142220974 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.142246962 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.142294884 CET	50015	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.142302036 CET	443	50015	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.146936893 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.146976948 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.147183895 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.147491932 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.147502899 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.174197912 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.174371958 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.174432993 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.174631119 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.174650908 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.174690962 CET	50013	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.174695969 CET	443	50013	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.177346945 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.177416086 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.177565098 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.177767992 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.177798986 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.693388939 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.695210934 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.695242882 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.699333906 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.699348927 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.701212883 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.704061031 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.704099894 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.706232071 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.706242085 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.772171974 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.772684097 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.772699118 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.773310900 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.773317099 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.823847055 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.823976994 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.824161053 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.824188948 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.824188948 CET	50016	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.824203968 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.824213028 CET	443	50016	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.827171087 CET	50021	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.827199936 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.827656984 CET	50021	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.827656984 CET	50021	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.827687025 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.831269979 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.831331015 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.831557035 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.831557035 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.831845045 CET	50017	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.831859112 CET	443	50017	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.833928108 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.833970070 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.834110022 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.834203959 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.834223032 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.896223068 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.896775961 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.896795988 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.897396088 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.897402048 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.902343988 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.902441025 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.902551889 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.902668953 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.902668953 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.902741909 CET	50018	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.902762890 CET	443	50018	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.905776978 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.905810118 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.905993938 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.906178951 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.906189919 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.923537970 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.924643993 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.924644947 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:04.924694061 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:04.924710989 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.029331923 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.029421091 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.029630899 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.029709101 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.029709101 CET	50019	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.029723883 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.029733896 CET	443	50019	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.032747984 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.032784939 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.032922029 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.033057928 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.033066988 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.055671930 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.055840015 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.056086063 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.056132078 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.056132078 CET	50020	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.056153059 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.056166887 CET	443	50020	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.061304092 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.061341047 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.065794945 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.065794945 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.065824986 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.574539900 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.575081110 CET	50021	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.575118065 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.575712919 CET	50021	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.575719118 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.642966986 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.643732071 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.643760920 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.644462109 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.644473076 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.705168962 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.705358028 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.705432892 CET	50021	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.705566883 CET	50021	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.705591917 CET	443	50021	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.709086895 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.709127903 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.709199905 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.709397078 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.709412098 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.786495924 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.787071943 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.787097931 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.787528992 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.787600040 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.787678957 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.787683964 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.787703991 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.787724018 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.787772894 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.787834883 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.788085938 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.788101912 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.788131952 CET	50023	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.788139105 CET	443	50023	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.792069912 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.792170048 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.792412043 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.792588949 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.792623043 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.812536955 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.812983990 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.813008070 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.813540936 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.813553095 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.919245958 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.919466019 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.919513941 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.919531107 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.919621944 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.919734001 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.919734001 CET	50024	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.919754028 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.919764042 CET	443	50024	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.923042059 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.923080921 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.923161983 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.923382998 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.923393965 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.943691969 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.943741083 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.943811893 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.943996906 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.944025040 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.944041967 CET	50025	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.944051981 CET	443	50025	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.947863102 CET	50029	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.947896957 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:05.948074102 CET	50029	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.948471069 CET	50029	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:05.948491096 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.455200911 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.455801964 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.455837965 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.456271887 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.456279039 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.529999018 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.530548096 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.530608892 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.531299114 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.531327963 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.587028980 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.587097883 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.587232113 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.587234974 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.587292910 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.587472916 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.587491035 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.587505102 CET	50026	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.587511063 CET	443	50026	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.591124058 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.591166019 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.591264963 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.591459036 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.591473103 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.631045103 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.631737947 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.631776094 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.632558107 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.632564068 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.669958115 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.670180082 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.670264959 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.671078920 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.671127081 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.671166897 CET	50027	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.671184063 CET	443	50027	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.675220013 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.675977945 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.676028013 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.676156998 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.676893950 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.677295923 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.677314997 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.678632975 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.678638935 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.679140091 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.679167986 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.679723978 CET	50029	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.679744005 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.680511951 CET	50029	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.680517912 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.763669014 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.763719082 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.763786077 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.763817072 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.763850927 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.763943911 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.764492035 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.764492035 CET	50022	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.764513016 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.764523983 CET	443	50022	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.773006916 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.773111105 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.773216963 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.773349047 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.773370981 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.805897951 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.805963993 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.806036949 CET	50029	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.806087971 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.806302071 CET	50029	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.806324005 CET	443	50029	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.809153080 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.809175014 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.809240103 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.809267044 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.809967995 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.810025930 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.811742067 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.811742067 CET	50028	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.811759949 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.811769962 CET	443	50028	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.817894936 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.817934990 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.818119049 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.818404913 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.818418026 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.820857048 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.820890903 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:06.820997953 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.821196079 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:06.821222067 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.330980062 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.353034019 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.353070974 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.354438066 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.354444027 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.405992031 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.447805882 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.451432943 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.451441050 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.453913927 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.453918934 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.480761051 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.480823994 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.480890989 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.480909109 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.480937958 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.480988026 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.481390953 CET	50030	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.481406927 CET	443	50030	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.485996008 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.486042023 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.486291885 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.486639023 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.486654997 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.530934095 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.534784079 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.534849882 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.536603928 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.536621094 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.555439949 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.556060076 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.556099892 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.556725979 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.556736946 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.577883005 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.578057051 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.578191996 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.578396082 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.578412056 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.578422070 CET	50031	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.578428030 CET	443	50031	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.582103968 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.582123041 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.582344055 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.582649946 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.582663059 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.665723085 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.665802002 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.666027069 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.666241884 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.666241884 CET	50032	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.666287899 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.666316032 CET	443	50032	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.671550035 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.671595097 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.671761990 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.671935081 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.671950102 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.674392939 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.675462008 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.675487995 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.676507950 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.676512957 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.700963020 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.700989008 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.701031923 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.701127052 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.701127052 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.701312065 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.701358080 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.701390982 CET	50034	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.701407909 CET	443	50034	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.703866959 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.703903913 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.704085112 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.704296112 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.704308987 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.804582119 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.804656029 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.804718971 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.804996967 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.805020094 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.805031061 CET	50033	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.805036068 CET	443	50033	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.808492899 CET	50039	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.808537006 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:07.808615923 CET	50039	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.808835983 CET	50039	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:07.808850050 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.261869907 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.263392925 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.263427019 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.264741898 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.264746904 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.310293913 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.311521053 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.311552048 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.313900948 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.313906908 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.397025108 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.397232056 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.397293091 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.397953987 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.397967100 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.398014069 CET	50035	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.398019075 CET	443	50035	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.412100077 CET	50040	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.412143946 CET	443	50040	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.412312031 CET	50040	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.413450003 CET	50040	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.413466930 CET	443	50040	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.417937994 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.422030926 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.422060013 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.423455000 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.423465014 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.631006002 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.631076097 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.631151915 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.631164074 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.631227970 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.631278992 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.631589890 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.631602049 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.631612062 CET	50036	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.631616116 CET	443	50036	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.632723093 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.637659073 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.642649889 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.642664909 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.644210100 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.644213915 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.645633936 CET	50039	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.645653009 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.646475077 CET	50039	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.646481037 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.650079012 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.650104046 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.650454044 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.651577950 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.651593924 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.755986929 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.756149054 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.756232023 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.757169008 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.757179022 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.757201910 CET	50037	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.757205963 CET	443	50037	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.767951965 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.767993927 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.768124104 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.768357992 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.768374920 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.771845102 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.771987915 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.772052050 CET	50039	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.772229910 CET	50039	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.772234917 CET	443	50039	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.778006077 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.778057098 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.778089046 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.778115988 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.778167009 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.778377056 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.778398037 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.778656006 CET	50038	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.778665066 CET	443	50038	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.778704882 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.779021025 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.779033899 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.782046080 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.782087088 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:08.782197952 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.782483101 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:08.782500982 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.388758898 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.389322996 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.389342070 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.389832020 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.389837980 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.500735044 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.503622055 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.503654003 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.504292011 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.504303932 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.524414062 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.524550915 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.524602890 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.524777889 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.524791956 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.524801016 CET	50041	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.524806023 CET	443	50041	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.526863098 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.527301073 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.527326107 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.527858019 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.527863979 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.528276920 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.528311014 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.528476954 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.528654099 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.528672934 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.563083887 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.563514948 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.563530922 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.563955069 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.563961029 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.632447958 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.632575035 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.632627964 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.632823944 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.632850885 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.632867098 CET	50042	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.632877111 CET	443	50042	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.636384964 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.636416912 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.636533022 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.636699915 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.636710882 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.662298918 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.663400888 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.663456917 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.663466930 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.663522005 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.663579941 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.663645983 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.663656950 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.663666010 CET	50044	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.663671017 CET	443	50044	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.666131973 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.666176081 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.666450977 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.666604996 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.666625977 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.697575092 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.697731018 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.697792053 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.697827101 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.697838068 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.697849989 CET	50043	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.697854042 CET	443	50043	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.699989080 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.700020075 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:09.700087070 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.700201035 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:09.700210094 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.306265116 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.307779074 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.307847977 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.308834076 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.308849096 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.378168106 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.394357920 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.404784918 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.404814005 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.431294918 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.438662052 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.438676119 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.441459894 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.441632986 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.441884041 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.444227934 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.446832895 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.446865082 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.446924925 CET	50045	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.446940899 CET	443	50045	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.461982012 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.461996078 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.475532055 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.491606951 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.491612911 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.541039944 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.541062117 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.542603016 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.542612076 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.559974909 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.560002089 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.560071945 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.560971022 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.560986996 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.565663099 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.565733910 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.565784931 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.565803051 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.565869093 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.565965891 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.566169024 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.566190004 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.566203117 CET	50046	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.566209078 CET	443	50046	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.572356939 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.572395086 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.572649002 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.572866917 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.572879076 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.616019011 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.616087914 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.616137981 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.618442059 CET	50047	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.618452072 CET	443	50047	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.633889914 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.633910894 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.633981943 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.647619963 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.647634029 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.667867899 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.667931080 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.668030024 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.668092012 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.669703960 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.669728041 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.669745922 CET	50048	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.669754982 CET	443	50048	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.686069965 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.686105967 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:10.686177015 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.700412035 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:10.700428963 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.316277027 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.316885948 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.316903114 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.317630053 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.317635059 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.346189976 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.346621990 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.346642971 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.347040892 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.347047091 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.413397074 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.413765907 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.413779974 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.414177895 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.414186001 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.437530994 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.437844992 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.437879086 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.438225031 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.438231945 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.447935104 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.448093891 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.448195934 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.448226929 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.448240042 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.448265076 CET	50049	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.448275089 CET	443	50049	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.451261044 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.451283932 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.451407909 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.451553106 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.451560020 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.482019901 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.482089043 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.482150078 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.482161999 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.482196093 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.482254982 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.482431889 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.482450962 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.482465029 CET	50050	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.482470989 CET	443	50050	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.485858917 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.485889912 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.486138105 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.486295938 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.486310005 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.551852942 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.551887989 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.552001953 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.552401066 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.552412033 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.552447081 CET	50051	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.552452087 CET	443	50051	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.558679104 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.558690071 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:11.558744907 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.559298038 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:11.559305906 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.018107891 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.018171072 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.018301010 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.018385887 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.018564939 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.018591881 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.018610001 CET	50052	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.018618107 CET	443	50052	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.021578074 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.021667957 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.021747112 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.021898031 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.021920919 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.224294901 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.225569010 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.225594997 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.226078987 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.226085901 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.301393986 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.301808119 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.301829100 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.302217960 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.302227974 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.352960110 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.353028059 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.353149891 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.353266954 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.353266954 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.353322983 CET	50054	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.353342056 CET	443	50054	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.355685949 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.355727911 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.355853081 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.355983019 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.355997086 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.398191929 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.398910999 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.398910999 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.398988962 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.399019957 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.432959080 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.433015108 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.433276892 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.433276892 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.433362007 CET	50055	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.433377028 CET	443	50055	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.435604095 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.435709000 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.435791969 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.435947895 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.435977936 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.530427933 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.530478954 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.530687094 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.530752897 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.530790091 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.530869961 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.530925035 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.530955076 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.530955076 CET	50053	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.530976057 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.530994892 CET	443	50053	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.533668995 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.533704996 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.533807993 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.533931017 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.533941984 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.785346985 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.785892963 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.785990953 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.786209106 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.786222935 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.918003082 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.918072939 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.918184996 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.918355942 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.918426037 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.918426037 CET	50056	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.918467045 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.918492079 CET	443	50056	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.920878887 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.920937061 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:12.921170950 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.921170950 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:12.921207905 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.096000910 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.096607924 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.096637011 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.097181082 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.097187042 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.177767992 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.178566933 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.178567886 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.178617954 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.178631067 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.226547956 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.226727009 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.226830006 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.226830959 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.227010965 CET	50057	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.227021933 CET	443	50057	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.229178905 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.229216099 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.229346037 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.229545116 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.229557037 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.309350967 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.309379101 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.309408903 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.309478998 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.309550047 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.309766054 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.309792995 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.309839010 CET	50058	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.309856892 CET	443	50058	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.312369108 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.312414885 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.312542915 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.312644005 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.312653065 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.380099058 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.380486965 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.380512953 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.380872965 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.380877972 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.509788990 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.510072947 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.510231018 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.510276079 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.510291100 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.510305882 CET	50059	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.510310888 CET	443	50059	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.512590885 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.512633085 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.512875080 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.512995005 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.513004065 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.698457003 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.698930025 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.698952913 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.699368954 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.699376106 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.916196108 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.916260958 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.916342020 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.916354895 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.916412115 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.916482925 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.916624069 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.916639090 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.916682959 CET	50060	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.916688919 CET	443	50060	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.919485092 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.919522047 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.919637918 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.919814110 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.919828892 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.970053911 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.970513105 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.970547915 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:13.970976114 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:13.970983028 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.092608929 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.093056917 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.093080997 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.093441010 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.093445063 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.100677013 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.100961924 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.101018906 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.101069927 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.101085901 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.101115942 CET	50061	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.101120949 CET	443	50061	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.103595972 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.103674889 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.103931904 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.104068995 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.104098082 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.232055902 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.232089996 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.232146978 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.232196093 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.232371092 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.232387066 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.232397079 CET	50062	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.232402086 CET	443	50062	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.234846115 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.234874010 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.234968901 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.235105991 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.235119104 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.239428043 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.239767075 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.239778996 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.240432024 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.240437031 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.367986917 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.368139029 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.368370056 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.368407965 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.368407965 CET	50063	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.368424892 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.368432045 CET	443	50063	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.370894909 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.370964050 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.371052980 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.371206999 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.371237040 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.659754038 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.660270929 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.660295963 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.660785913 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.660790920 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.789880037 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.790186882 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.790497065 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.790497065 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.790642977 CET	50064	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.790656090 CET	443	50064	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.792758942 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.792788982 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.792937040 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.793112040 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.793124914 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.869983912 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.870522022 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.870570898 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.870853901 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.870866060 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.965323925 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.966264963 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.966264963 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:14.966301918 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:14.966317892 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.005439997 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.005543947 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.005640030 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.005697966 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.005901098 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.005949020 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.005949020 CET	50065	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.005992889 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.006020069 CET	443	50065	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.008500099 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.008541107 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.008657932 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.008785963 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.008800983 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.096609116 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.096704006 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.096812963 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.096878052 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.096878052 CET	50066	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.096893072 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.096900940 CET	443	50066	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.097307920 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.099076033 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.099109888 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.099236012 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.099343061 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.099354982 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.099616051 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.099674940 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.099977970 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.099992037 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.225584030 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.225662947 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.225802898 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.225910902 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.225910902 CET	50067	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.225956917 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.225985050 CET	443	50067	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.228154898 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.228185892 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.228410006 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.228410006 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.228436947 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.556361914 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.556811094 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.556834936 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.557215929 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.557219982 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.692208052 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.692272902 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.692327976 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.692353964 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.692406893 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.692513943 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.692595005 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.692610979 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.692622900 CET	50068	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.692627907 CET	443	50068	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.695394993 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.695430994 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.695501089 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.695688009 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.695698023 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.773461103 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.773864985 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.773891926 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.774296045 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.774302006 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.826773882 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.827097893 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.827120066 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.827481985 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.827486992 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.907979965 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.908126116 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.908200979 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.908252954 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.908269882 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.908279896 CET	50069	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.908284903 CET	443	50069	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.910948992 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.910979033 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.911043882 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.911201000 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.911207914 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.956176043 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.956218004 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.956270933 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.956279993 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.956327915 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.956490040 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.956501007 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.956510067 CET	50070	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.956513882 CET	443	50070	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.959600925 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.959629059 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.959688902 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.959822893 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.959836960 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.963782072 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.964219093 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.964238882 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:15.964833975 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:15.964838028 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.093211889 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.093302965 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.093482018 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.093554974 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.093564034 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.093574047 CET	50071	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.093578100 CET	443	50071	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.096910000 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.096946955 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.097013950 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.097212076 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.097227097 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.432080030 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.432795048 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.432816029 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.433326960 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.433331966 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.562237024 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.562400103 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.562619925 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.562619925 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.562721014 CET	50072	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.562735081 CET	443	50072	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.565701962 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.565783978 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.565891027 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.566042900 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.566072941 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.667134047 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.667917013 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.667941093 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.671164036 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.671171904 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.693064928 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.694051981 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.694051981 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.694070101 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.694078922 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.798841953 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.798943996 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.799048901 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.799184084 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.799256086 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.799256086 CET	50073	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.799273968 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.799283028 CET	443	50073	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.802467108 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.802505970 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.802622080 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.802776098 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.802788973 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.824470997 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.824536085 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.824771881 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.824845076 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.824845076 CET	50074	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.824862003 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.824867010 CET	443	50074	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.829941988 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.829981089 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.830423117 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.830497980 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.830507994 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.835345984 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.836198092 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.836198092 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.836219072 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.836227894 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.966691971 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.966871023 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.967163086 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.967541933 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.967564106 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.967600107 CET	50075	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.967607021 CET	443	50075	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.970546007 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.970587015 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:16.970768929 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.970962048 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:16.970977068 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.306168079 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.307183027 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.307251930 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.307310104 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.307341099 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.435883045 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.435964108 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.436067104 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.436114073 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.436160088 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.436602116 CET	50076	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.436619043 CET	443	50076	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.441469908 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.441561937 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.441791058 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.441987991 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.442024946 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.538408041 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.539067984 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.539100885 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.539561033 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.539566040 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.561413050 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.561898947 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.561923027 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.562407970 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.562421083 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.666802883 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.666870117 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.666970015 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.684720993 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.684741974 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.684756041 CET	50077	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.684762955 CET	443	50077	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.690028906 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.690072060 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.690181017 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.690469980 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.690485001 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.692698956 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.692735910 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.692783117 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.692797899 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.692833900 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.692985058 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.693030119 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.693061113 CET	50078	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.693075895 CET	443	50078	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.699500084 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.699558020 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.699626923 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.699770927 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.699800014 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.713268995 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.713681936 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.713697910 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.714255095 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.714263916 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.847656012 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.847825050 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.847918034 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.848160028 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.848160028 CET	50080	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.848176956 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.848186970 CET	443	50080	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.851630926 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.851670027 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:17.851741076 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.851907969 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:17.851919889 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.394157887 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.425594091 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.426918983 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.436098099 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.468014956 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.483221054 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.733793974 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.761825085 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.761857033 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.765480995 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.765489101 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.766859055 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.766872883 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.767577887 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.767582893 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.768065929 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.768095016 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.768507004 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.768513918 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.772310019 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.772337914 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.772690058 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.772695065 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.891590118 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.891674995 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.891746044 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.892096043 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.892151117 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.892205954 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.892209053 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.892261982 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.892393112 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.892412901 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.892426014 CET	50081	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.892433882 CET	443	50081	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.893202066 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.893208027 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.893220901 CET	50083	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.893229008 CET	443	50083	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.896368980 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.896409035 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.896466970 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.896501064 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.896533966 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.896605968 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.896776915 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.896780014 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.896787882 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.896792889 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.900990009 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.901262999 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.901326895 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.901356936 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.901374102 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.901382923 CET	50082	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.901387930 CET	443	50082	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.902818918 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.902883053 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.902988911 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.903611898 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.903621912 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.903635979 CET	50084	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.903640985 CET	443	50084	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.904673100 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.904681921 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.904735088 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.905217886 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.905229092 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.905885935 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.905915022 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:18.906055927 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.906189919 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:18.906197071 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.626466036 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.627055883 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.627088070 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.627532959 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.627552986 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.627557993 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.627841949 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.627875090 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.628170013 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.628176928 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.635364056 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.635691881 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.635723114 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.636121988 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.636127949 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.639534950 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.639879942 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.639905930 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.640275955 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.640284061 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.757152081 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.757313967 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.757378101 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.757647038 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.757668972 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.757679939 CET	50086	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.757684946 CET	443	50086	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.760828018 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.760874033 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.761034966 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.761205912 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.761218071 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.761802912 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.762511015 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.762564898 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.762571096 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.762624025 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.762646914 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.762666941 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.762676001 CET	50085	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.762681961 CET	443	50085	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.764096022 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.764161110 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.764262915 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.764271975 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.764343023 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.764408112 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.764748096 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.764751911 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.764760971 CET	50087	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.764764071 CET	443	50087	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.765069962 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.765101910 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.765239000 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.765363932 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.765378952 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.766949892 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.766962051 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.767025948 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.767168999 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.767183065 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.767824888 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.767992973 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.768066883 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.768192053 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.768192053 CET	50088	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.768198013 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.768205881 CET	443	50088	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.770199060 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.770229101 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:19.770299911 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.770457983 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:19.770472050 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.497526884 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.498255014 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.498294115 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.499245882 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.499252081 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.502774954 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.505629063 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.505655050 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.507158995 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.507164955 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.508317947 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.508507967 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.508965969 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.508989096 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.511344910 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.511351109 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.512389898 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.512442112 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.513803959 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.513812065 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.626795053 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.626871109 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.626933098 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.627676010 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.627696037 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.627708912 CET	50089	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.627717018 CET	443	50089	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.634442091 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.634608984 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.634673119 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.634932041 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.634955883 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.634965897 CET	50090	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.634972095 CET	443	50090	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.640259981 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.640412092 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.640489101 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.641864061 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.641904116 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.642000914 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.644510984 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.644553900 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.644659042 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.644916058 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.644928932 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.644961119 CET	50092	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.644967079 CET	443	50092	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.647639990 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.647661924 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.647705078 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.647737026 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.647783995 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.648216009 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.648241043 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.648312092 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.648557901 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.648572922 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.649051905 CET	50091	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.649065971 CET	443	50091	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.649425983 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.649439096 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.651072979 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.651108027 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.653888941 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.653917074 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:20.654005051 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.654248953 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:20.654267073 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.372812986 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.378902912 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.385107040 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.400918007 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.422554016 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.423175097 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.436489105 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.451648951 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.546469927 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.546489000 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.547660112 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.547666073 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.548067093 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.548072100 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.548619986 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.548624039 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.549201965 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.549221992 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.549665928 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.549669981 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.551029921 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.551057100 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.551718950 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.551727057 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.672863960 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.673072100 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.673144102 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.676170111 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.676254034 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.676307917 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.677160025 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.677294970 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.677342892 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.677709103 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.677726984 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.677759886 CET	50093	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.677767992 CET	443	50093	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.681796074 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.681818962 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.681829929 CET	50094	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.681835890 CET	443	50094	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.684257030 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.684268951 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.684287071 CET	50095	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.684290886 CET	443	50095	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.685333967 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.685528040 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.685589075 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.707587004 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.707614899 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.707629919 CET	50096	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.707637072 CET	443	50096	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.791265965 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.791335106 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.791414976 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.802491903 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.802510023 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.803920984 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.803961992 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.804109097 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.804589033 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.804603100 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.808562040 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.808604002 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.808682919 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.810154915 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.810189962 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.810251951 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.838234901 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.838252068 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:21.838424921 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:21.838493109 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.550520897 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.551942110 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.551970005 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.552932024 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.552938938 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.555026054 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.555502892 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.555531025 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.556478024 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.556484938 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.578459024 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.579036951 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.579061985 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.581413984 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.581418991 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.585114956 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.585442066 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.585525990 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.586039066 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.586052895 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.683126926 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.683207989 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.683595896 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.683598042 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.683657885 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.683811903 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.683882952 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.683898926 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.683940887 CET	50098	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.683945894 CET	443	50098	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.687746048 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.687789917 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.687808037 CET	50100	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.687817097 CET	443	50100	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.705872059 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.705909014 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:22.706047058 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.706115961 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.706160069 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:22.706279039 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.706470966 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.706485987 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:22.706820965 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.706835985 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:22.716641903 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.716707945 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.716769934 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.716784954 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.716805935 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.716857910 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.716983080 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.716991901 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.717004061 CET	50101	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.717006922 CET	443	50101	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.721961975 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.721992970 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:22.722604990 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.723052979 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.723066092 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:22.793906927 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.793999910 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.794131041 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.804261923 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.804274082 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.804284096 CET	50099	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:22.804290056 CET	443	50099	13.107.246.45	192.168.2.7
Oct 30, 2024 03:48:22.810115099 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.810159922 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:22.811013937 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.811342955 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:22.811358929 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:23.442723989 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:23.444684029 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:23.447817087 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:23.486665010 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:23.486666918 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:23.502151012 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:23.560743093 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:23.604702950 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:23.995573997 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:23.995625973 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.024102926 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.024122953 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.025300980 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.025382042 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.026359081 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.026375055 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.027672052 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.027745008 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.028634071 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.028649092 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.029932022 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.030024052 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.031120062 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.031132936 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.150588989 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.150676012 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.150763988 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.150891066 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.150960922 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.151042938 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.151081085 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.151138067 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.155056000 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.155128956 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.155293941 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.155390978 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.160247087 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.160306931 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.160371065 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.160851002 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.160882950 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.160900116 CET	50103	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.160907984 CET	443	50103	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.164011955 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.164041042 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.164055109 CET	50104	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.164060116 CET	443	50104	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.165904045 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.165904045 CET	50102	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.165977001 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.166002989 CET	443	50102	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.173176050 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.173177004 CET	50105	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.173229933 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.173257113 CET	443	50105	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.181533098 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.181562901 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.181644917 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.187587023 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.187645912 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.187752008 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.187849998 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.187886000 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.190300941 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.190352917 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.190958023 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.190998077 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.191118002 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.191236019 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.191246033 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.191677094 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.191710949 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.191785097 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.193393946 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.193413973 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.920985937 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.928003073 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.931088924 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.932223082 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.974050045 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.974055052 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.974239111 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.974239111 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.986552000 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.986589909 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.988992929 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.989006042 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.991594076 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.991611004 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.993249893 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.993257999 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.994590044 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.994605064 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:24.997008085 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:24.997015953 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.001482964 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.001503944 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.003045082 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.003051043 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.114456892 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.114537954 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.114604950 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.121361971 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.121445894 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.121503115 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.121525049 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.121556997 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.121608973 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.128323078 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.128379107 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.128412008 CET	50107	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.128427982 CET	443	50107	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.130001068 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.130023956 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.130036116 CET	50109	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.130043030 CET	443	50109	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.131129026 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.131130934 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.131191015 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.131282091 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.131398916 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.131450891 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.427146912 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.427146912 CET	50106	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.427207947 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.427248955 CET	443	50106	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.428863049 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.428901911 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.429240942 CET	50108	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.429253101 CET	443	50108	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.573824883 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.573879957 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.574307919 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.595520973 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:25.595561028 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:25.599267960 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:25.599767923 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:25.599783897 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:25.603442907 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.603466034 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.607063055 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.607069016 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.607093096 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.607104063 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.608916998 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.608927011 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.608983994 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.608987093 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.609256029 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.609283924 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.609296083 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.631942034 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.631951094 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:25.635118961 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:25.635126114 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.332398891 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.335901022 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.352350950 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.354459047 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.354486942 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.355411053 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.355420113 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.356138945 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.356138945 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.356153965 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.356163025 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.366765976 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.366794109 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.367981911 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.367990017 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.376967907 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.377366066 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.377384901 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.377763033 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.377768993 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.440681934 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:26.440988064 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:26.441018105 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:26.441339970 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:26.441657066 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:26.441714048 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:26.479726076 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.479827881 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.479878902 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.480125904 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.480159998 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.480175972 CET	50113	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.480182886 CET	443	50113	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.482326984 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.482414007 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.482461929 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.484261990 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.484304905 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.484363079 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.484468937 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.484477997 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.484488964 CET	50110	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.484494925 CET	443	50110	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.485980034 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.486001968 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.491797924 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.491889954 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.491969109 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.492204905 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.492234945 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.493494987 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.493524075 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.493565083 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.493588924 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.493647099 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.493688107 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.493865967 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.493879080 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.493886948 CET	50112	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.493891954 CET	443	50112	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.497857094 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.497893095 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.497947931 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.498519897 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.498531103 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.508831024 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.508856058 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.508898973 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.508910894 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.508928061 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.508971930 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.509022951 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.509031057 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.509038925 CET	50114	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.509042978 CET	443	50114	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.514703035 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.514754057 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.514828920 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.515394926 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:26.515419006 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:26.533371925 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:27.226119041 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.229242086 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.230962038 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.231004000 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.231470108 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.231477976 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.231828928 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.231874943 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.232177019 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.232188940 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.270189047 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.270777941 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.270822048 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.271330118 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.271337032 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.276201010 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.276617050 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.276638031 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.277038097 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.277044058 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.359517097 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.359575033 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.359723091 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.359741926 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.359786034 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.360038042 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.360038042 CET	50115	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.360070944 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.360081911 CET	443	50115	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.360409975 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.360431910 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.360496044 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.360521078 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.363265038 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.363425970 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.363425970 CET	50117	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.363456964 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.363468885 CET	443	50117	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.371378899 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.371428013 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.371560097 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.373904943 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.373955965 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.374116898 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.374825954 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.374828100 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.374844074 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.374851942 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.407041073 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.407069921 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.407150984 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.407183886 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.407583952 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.407583952 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.407639027 CET	50116	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.407660961 CET	443	50116	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.410831928 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.410936117 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.411056995 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.411156893 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.411331892 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.411418915 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.412101030 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.412111044 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.412121058 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.412152052 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.412153959 CET	50118	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.412168980 CET	443	50118	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.415452957 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.415493965 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:27.419172049 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.419893980 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:27.419926882 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.112525940 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.113683939 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.116699934 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.116699934 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.116738081 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.116756916 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.117136955 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.117167950 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.123119116 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.123123884 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.143229008 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.143841982 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.143886089 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.144403934 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.144411087 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.150556087 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.150903940 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.150924921 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.155106068 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.155112028 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.242791891 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.242860079 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.247175932 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.247175932 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.247222900 CET	50119	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.247245073 CET	443	50119	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.250257015 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.250313997 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.250780106 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.250847101 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.250870943 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.250919104 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.251209021 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.251210928 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.251224041 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.251231909 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.251251936 CET	50120	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.251257896 CET	443	50120	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.259114027 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.259145975 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.263554096 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.271117926 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.271131039 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.274286032 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.274353981 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.279233932 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.279551983 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.279593945 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.279647112 CET	50121	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.279663086 CET	443	50121	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.282075882 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.282099009 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.282155037 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.282234907 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.282234907 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.282494068 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.282504082 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.282530069 CET	50122	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.282533884 CET	443	50122	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.293417931 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.293427944 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.293524981 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.293562889 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.293637037 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.293683052 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.293847084 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.293848038 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.293857098 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.293862104 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.680128098 CET	50040	443	192.168.2.7	13.107.246.45
Oct 30, 2024 03:48:28.683969975 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.684010029 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.684065104 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.684514999 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.684531927 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.993937016 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.994699001 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.994813919 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:28.995220900 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:28.995235920 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.004754066 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.005181074 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.005204916 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.005620956 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.005625963 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.024274111 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.024673939 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.024688005 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.025186062 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.025191069 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.030442953 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.030811071 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.030826092 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.031205893 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.031210899 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.129281998 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.129345894 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.129431009 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.129476070 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.129600048 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.129676104 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.130029917 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.130069971 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.130098104 CET	50123	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.130114079 CET	443	50123	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.136040926 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.136090040 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.136168957 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.136457920 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.136486053 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.160252094 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.160274029 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.160326958 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.160341978 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.160372019 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.160423994 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.160552025 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.160568953 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.160597086 CET	50125	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.160602093 CET	443	50125	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.164628029 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.164661884 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.164722919 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.165515900 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.165530920 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.256103039 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.256130934 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.256139994 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.256170034 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.256191015 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.256207943 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.256247997 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.256277084 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.270129919 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.270203114 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.270225048 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.270282030 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.274287939 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.274301052 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.274311066 CET	50124	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.274315119 CET	443	50124	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.278251886 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.278361082 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.278439999 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.279133081 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.279165030 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.279620886 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.279644012 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.279660940 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.279696941 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.279702902 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.279732943 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.279751062 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.392936945 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.392997026 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.393024921 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.393038988 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.393107891 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.393901110 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.393901110 CET	50126	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.393909931 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.393918037 CET	443	50126	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.400441885 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.400464058 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.403166056 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.403310061 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.403323889 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.444643974 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.444726944 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.452529907 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.452543020 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.452781916 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.455836058 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.503334045 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.589790106 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.589812994 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.590013027 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.590032101 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.590161085 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.590806007 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.590857029 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.591171026 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.610121012 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.610146046 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.610197067 CET	50127	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.610205889 CET	443	50127	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.619383097 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.619410038 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.620095015 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.631336927 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.631369114 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.918946981 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.919092894 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.923093081 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.923114061 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.923408985 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.924748898 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.926754951 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.927114010 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.952903032 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.952975035 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.953974962 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:29.955796003 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:29.967381001 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.003334999 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.018280983 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.018832922 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.057598114 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.058231115 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.058686018 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.058743000 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.058800936 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.059048891 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.062707901 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.075743914 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.075743914 CET	50129	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.075790882 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.075818062 CET	443	50129	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.088262081 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.088294029 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.088434935 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.088464022 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.088643074 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.088685036 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.088730097 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.088886023 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.088917971 CET	443	50128	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.089096069 CET	50128	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.107333899 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.117958069 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.117999077 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.122317076 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.130425930 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.130471945 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.130666018 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.130692959 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.130706072 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.132443905 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.132462978 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.143596888 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.144501925 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.149945021 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.149987936 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.150279999 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.161151886 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.190853119 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.191155910 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.193645000 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.203332901 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.224102974 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.224102974 CET	50130	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.224145889 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.224163055 CET	443	50130	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.230113983 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.230226994 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.230418921 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.233098030 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.233136892 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.296679974 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.296859980 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.297123909 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.314294100 CET	50131	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.314342976 CET	443	50131	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.335884094 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.335932970 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.336173058 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.341337919 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.341367006 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.404463053 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.429116964 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.429141045 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.429734945 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.429744959 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.561146975 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.561513901 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.561599016 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.562330008 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.562330008 CET	50132	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.562365055 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.562377930 CET	443	50132	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.567250013 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.567296982 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.567378044 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.568075895 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.568090916 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.862868071 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.863821983 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.863843918 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.864188910 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.864193916 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.866338015 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.866628885 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.866657972 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.867033958 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.867038965 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.964036942 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.992568970 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.992659092 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.992808104 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.995681047 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.996443033 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.996491909 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:30.996500015 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:30.996539116 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.037173033 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.045769930 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.045794964 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.047334909 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.047343969 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.086503983 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.086541891 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.086543083 CET	50134	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.086550951 CET	443	50134	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.091736078 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.091773987 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.091789961 CET	50133	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.091797113 CET	443	50133	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.115339041 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.156312943 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.156351089 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.158058882 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.158076048 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.194725990 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.195141077 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.195195913 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.233463049 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.233505011 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.233521938 CET	50135	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.233527899 CET	443	50135	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.303375006 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.305005074 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.305423021 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.305474997 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.361706972 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.361747026 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.362848997 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.362862110 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.363476038 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.363512993 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.363524914 CET	50136	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.363533020 CET	443	50136	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.488744974 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.488955975 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.489206076 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.502727985 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.502760887 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:31.502778053 CET	50137	443	192.168.2.7	13.107.246.60
Oct 30, 2024 03:48:31.502785921 CET	443	50137	13.107.246.60	192.168.2.7
Oct 30, 2024 03:48:36.437728882 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:36.437819004 CET	443	50111	142.250.184.196	192.168.2.7
Oct 30, 2024 03:48:36.437886000 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:36.738675117 CET	50111	443	192.168.2.7	142.250.184.196
Oct 30, 2024 03:48:36.738720894 CET	443	50111	142.250.184.196	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 03:47:21.755433083 CET	53	49893	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:21.756727934 CET	53	63071	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:22.953552008 CET	52990	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:22.953675032 CET	53028	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:23.260780096 CET	53	57748	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:23.972464085 CET	52853	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:23.972852945 CET	55879	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:24.168261051 CET	53	53028	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:24.186049938 CET	53	52990	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:25.151082039 CET	53	52853	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:25.226491928 CET	53	55879	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:25.548316956 CET	57223	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:25.548508883 CET	65366	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:25.555814028 CET	53	65366	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:25.555831909 CET	53	57223	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:25.948738098 CET	53	49321	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:28.502247095 CET	53	54015	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:28.521503925 CET	51054	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:28.522082090 CET	50931	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:28.897587061 CET	53	50931	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:29.546578884 CET	123	123	192.168.2.7	20.101.57.9
Oct 30, 2024 03:47:29.750786066 CET	50361	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:29.803248882 CET	123	123	20.101.57.9	192.168.2.7
Oct 30, 2024 03:47:29.947082996 CET	53	50361	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:30.311429024 CET	53	51054	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:30.848815918 CET	53	53018	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:31.078610897 CET	53	51939	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:31.087562084 CET	123	123	192.168.2.7	20.101.57.9
Oct 30, 2024 03:47:31.343947887 CET	123	123	20.101.57.9	192.168.2.7
Oct 30, 2024 03:47:36.084093094 CET	52604	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:36.084259033 CET	57097	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:36.090929031 CET	53	56866	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:36.093482971 CET	51911	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:36.093650103 CET	64082	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:36.117197990 CET	53	57097	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:36.143022060 CET	53	52604	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:36.147515059 CET	53175	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:36.168993950 CET	53	53175	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:38.199553013 CET	62319	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:38.199702978 CET	58631	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:38.202513933 CET	61780	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:38.202887058 CET	54173	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:38.208333015 CET	53	62319	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:38.208681107 CET	53	58631	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:38.209990978 CET	53	54173	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:38.210577965 CET	53	61780	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:38.313863993 CET	52506	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:38.314038038 CET	50600	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:38.321552992 CET	53	52506	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:38.322002888 CET	53	50600	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.349349022 CET	51257	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.349715948 CET	58960	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.367544889 CET	53	51257	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.367562056 CET	53	58960	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.388739109 CET	65491	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.389010906 CET	51383	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.499732971 CET	53	58409	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.527071953 CET	64763	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.527281046 CET	58622	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.529727936 CET	56890	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.530090094 CET	62521	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.534261942 CET	53	64763	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.535231113 CET	53	58622	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.537405968 CET	53	62521	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.537453890 CET	53	56890	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.537513018 CET	65145	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.537718058 CET	50666	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.549217939 CET	53	62344	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.598972082 CET	62180	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.599147081 CET	55738	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:40.608072042 CET	53	62180	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.608088017 CET	53	55738	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:40.692827940 CET	53	58045	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:41.388070107 CET	53	62357	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:41.603559971 CET	63305	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:41.603776932 CET	55730	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:41.610690117 CET	53	63305	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:41.610949993 CET	53	55730	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:43.407016039 CET	53	61005	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:44.592884064 CET	58599	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:44.593400002 CET	59432	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:44.600182056 CET	53	58599	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:44.601319075 CET	53	59432	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:45.726453066 CET	65354	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:45.727070093 CET	50522	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:45.734285116 CET	53	65354	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:45.734601021 CET	53	50522	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:45.735673904 CET	49949	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:45.735841036 CET	53718	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:45.743318081 CET	53	53718	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:45.743391991 CET	53	49949	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:54.704787970 CET	63407	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:54.705121994 CET	54681	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:54.705600023 CET	52104	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:54.705741882 CET	57387	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:54.706073999 CET	50774	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:54.706196070 CET	65397	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:54.730057001 CET	53	65397	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:54.740698099 CET	53	57387	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:55.763576984 CET	49991	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:55.763972044 CET	60825	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:55.771940947 CET	53	60825	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:55.879955053 CET	63982	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:55.880250931 CET	59971	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:55.887865067 CET	53	59971	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:56.687397003 CET	54143	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:56.687690973 CET	52327	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:56.688533068 CET	53671	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:56.688926935 CET	55623	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:56.722054005 CET	53	52327	1.1.1.1	192.168.2.7
Oct 30, 2024 03:47:56.724212885 CET	59407	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:56.724412918 CET	61970	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:57.538887024 CET	55250	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:57.539263010 CET	62438	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:47:57.572349072 CET	53	62438	1.1.1.1	192.168.2.7
Oct 30, 2024 03:48:00.403953075 CET	65236	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:48:00.404347897 CET	49996	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:48:00.416162014 CET	65041	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:48:00.416762114 CET	54768	53	192.168.2.7	1.1.1.1
Oct 30, 2024 03:48:00.439672947 CET	53	54768	1.1.1.1	192.168.2.7
Oct 30, 2024 03:48:00.572381973 CET	53	53860	1.1.1.1	192.168.2.7
Oct 30, 2024 03:48:21.404608965 CET	53	55621	1.1.1.1	192.168.2.7
Oct 30, 2024 03:48:24.617933035 CET	53	61375	1.1.1.1	192.168.2.7
Oct 30, 2024 03:48:25.552609921 CET	138	138	192.168.2.7	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 30, 2024 03:47:25.151180983 CET	192.168.2.7	1.1.1.1	c264	(Port unreachable)	Destination Unreachable
Oct 30, 2024 03:47:30.311523914 CET	192.168.2.7	1.1.1.1	c264	(Port unreachable)	Destination Unreachable
Oct 30, 2024 03:47:54.742187977 CET	192.168.2.7	1.1.1.1	c256	(Port unreachable)	Destination Unreachable
Oct 30, 2024 03:47:56.722464085 CET	192.168.2.7	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 03:47:22.953552008 CET	192.168.2.7	1.1.1.1	0x8ece	Standard query (0)	www.harbour-plaza.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:22.953675032 CET	192.168.2.7	1.1.1.1	0xfe7e	Standard query (0)	www.harbour-plaza.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:23.972464085 CET	192.168.2.7	1.1.1.1	0xc035	Standard query (0)	www.harbour-plaza.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:23.972852945 CET	192.168.2.7	1.1.1.1	0xa115	Standard query (0)	www.harbour-plaza.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:25.548316956 CET	192.168.2.7	1.1.1.1	0xf84	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:25.548508883 CET	192.168.2.7	1.1.1.1	0xb1b1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:28.521503925 CET	192.168.2.7	1.1.1.1	0x6c8a	Standard query (0)	www.harbour-plaza.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:28.522082090 CET	192.168.2.7	1.1.1.1	0xadb8	Standard query (0)	www.harbour-plaza.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:29.750786066 CET	192.168.2.7	1.1.1.1	0xed7e	Standard query (0)	www.harbour-plaza.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:36.084093094 CET	192.168.2.7	1.1.1.1	0xc1f8	Standard query (0)	tt.mbww.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:36.084259033 CET	192.168.2.7	1.1.1.1	0xc1f0	Standard query (0)	tt.mbww.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:36.093482971 CET	192.168.2.7	1.1.1.1	0x95a9	Standard query (0)	onboard.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:36.093650103 CET	192.168.2.7	1.1.1.1	0x6ca3	Standard query (0)	onboard.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:36.147515059 CET	192.168.2.7	1.1.1.1	0xdea	Standard query (0)	tt.mbww.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.199553013 CET	192.168.2.7	1.1.1.1	0x2c53	Standard query (0)	harbourplazahotel.122.2o7.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.199702978 CET	192.168.2.7	1.1.1.1	0xe17e	Standard query (0)	harbourplazahotel.122.2o7.net	65	IN (0x0001)	false
Oct 30, 2024 03:47:38.202513933 CET	192.168.2.7	1.1.1.1	0x49ea	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.202887058 CET	192.168.2.7	1.1.1.1	0x3c2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 03:47:38.313863993 CET	192.168.2.7	1.1.1.1	0xd7dc	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.314038038 CET	192.168.2.7	1.1.1.1	0xc037	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:40.349349022 CET	192.168.2.7	1.1.1.1	0x5a0c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.349715948 CET	192.168.2.7	1.1.1.1	0xe8dc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:40.388739109 CET	192.168.2.7	1.1.1.1	0xc251	Standard query (0)	onboard.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.389010906 CET	192.168.2.7	1.1.1.1	0xb55d	Standard query (0)	onboard.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:40.527071953 CET	192.168.2.7	1.1.1.1	0xbf27	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.527281046 CET	192.168.2.7	1.1.1.1	0x64ac	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 03:47:40.529727936 CET	192.168.2.7	1.1.1.1	0x8984	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.530090094 CET	192.168.2.7	1.1.1.1	0x767b	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:40.537513018 CET	192.168.2.7	1.1.1.1	0xbcf8	Standard query (0)	onboard.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.537718058 CET	192.168.2.7	1.1.1.1	0xa838	Standard query (0)	onboard.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:40.598972082 CET	192.168.2.7	1.1.1.1	0xc6d6	Standard query (0)	harbourplazahotel.122.2o7.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.599147081 CET	192.168.2.7	1.1.1.1	0x6644	Standard query (0)	harbourplazahotel.122.2o7.net	65	IN (0x0001)	false
Oct 30, 2024 03:47:41.603559971 CET	192.168.2.7	1.1.1.1	0xc90e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:41.603776932 CET	192.168.2.7	1.1.1.1	0xe6e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:44.592884064 CET	192.168.2.7	1.1.1.1	0xe30a	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:44.593400002 CET	192.168.2.7	1.1.1.1	0x34a1	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 03:47:45.726453066 CET	192.168.2.7	1.1.1.1	0xadb7	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.727070093 CET	192.168.2.7	1.1.1.1	0xf457	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 30, 2024 03:47:45.735673904 CET	192.168.2.7	1.1.1.1	0x4c75	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.735841036 CET	192.168.2.7	1.1.1.1	0x76f0	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 03:47:54.704787970 CET	192.168.2.7	1.1.1.1	0x40d1	Standard query (0)	targeted-messages.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:54.705121994 CET	192.168.2.7	1.1.1.1	0xd505	Standard query (0)	targeted-messages.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:54.705600023 CET	192.168.2.7	1.1.1.1	0x8719	Standard query (0)	static-meta.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:54.705741882 CET	192.168.2.7	1.1.1.1	0x598f	Standard query (0)	static-meta.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:54.706073999 CET	192.168.2.7	1.1.1.1	0x3eaa	Standard query (0)	b.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:54.706196070 CET	192.168.2.7	1.1.1.1	0x2c62	Standard query (0)	b.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:55.763576984 CET	192.168.2.7	1.1.1.1	0x3928	Standard query (0)	b.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:55.763972044 CET	192.168.2.7	1.1.1.1	0xe2e6	Standard query (0)	b.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:55.879955053 CET	192.168.2.7	1.1.1.1	0xbcf7	Standard query (0)	static-meta.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:55.880250931 CET	192.168.2.7	1.1.1.1	0xec8b	Standard query (0)	static-meta.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:56.687397003 CET	192.168.2.7	1.1.1.1	0x2e7e	Standard query (0)	b.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:56.687690973 CET	192.168.2.7	1.1.1.1	0xfec4	Standard query (0)	b.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:56.688533068 CET	192.168.2.7	1.1.1.1	0x445e	Standard query (0)	targeted-messages.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:56.688926935 CET	192.168.2.7	1.1.1.1	0x3549	Standard query (0)	targeted-messages.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:56.724212885 CET	192.168.2.7	1.1.1.1	0x4fb9	Standard query (0)	targeted-messages.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:56.724412918 CET	192.168.2.7	1.1.1.1	0x1c59	Standard query (0)	targeted-messages.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:47:57.538887024 CET	192.168.2.7	1.1.1.1	0x2676	Standard query (0)	messages.guest-experience.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:57.539263010 CET	192.168.2.7	1.1.1.1	0xd6fc	Standard query (0)	messages.guest-experience.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:48:00.403953075 CET	192.168.2.7	1.1.1.1	0x8c4e	Standard query (0)	api.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:48:00.404347897 CET	192.168.2.7	1.1.1.1	0xb889	Standard query (0)	api.triptease.io	65	IN (0x0001)	false
Oct 30, 2024 03:48:00.416162014 CET	192.168.2.7	1.1.1.1	0x165b	Standard query (0)	messages.guest-experience.triptease.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:48:00.416762114 CET	192.168.2.7	1.1.1.1	0xa6a3	Standard query (0)	messages.guest-experience.triptease.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 03:47:24.168261051 CET	1.1.1.1	192.168.2.7	0xfe7e	No error (0)	www.harbour-plaza.com	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:24.186049938 CET	1.1.1.1	192.168.2.7	0x8ece	No error (0)	www.harbour-plaza.com	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:24.186049938 CET	1.1.1.1	192.168.2.7	0x8ece	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.166.199.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:24.186049938 CET	1.1.1.1	192.168.2.7	0x8ece	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.167.161.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:24.186049938 CET	1.1.1.1	192.168.2.7	0x8ece	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.162.38.120	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:25.151082039 CET	1.1.1.1	192.168.2.7	0xc035	No error (0)	www.harbour-plaza.com	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:25.151082039 CET	1.1.1.1	192.168.2.7	0xc035	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.162.38.120	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:25.151082039 CET	1.1.1.1	192.168.2.7	0xc035	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.166.199.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:25.151082039 CET	1.1.1.1	192.168.2.7	0xc035	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.167.161.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:25.226491928 CET	1.1.1.1	192.168.2.7	0xa115	No error (0)	www.harbour-plaza.com	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:25.555814028 CET	1.1.1.1	192.168.2.7	0xb1b1	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 03:47:25.555831909 CET	1.1.1.1	192.168.2.7	0xf84	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:28.897587061 CET	1.1.1.1	192.168.2.7	0xadb8	No error (0)	www.harbour-plaza.com	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:29.947082996 CET	1.1.1.1	192.168.2.7	0xed7e	No error (0)	www.harbour-plaza.com	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:29.947082996 CET	1.1.1.1	192.168.2.7	0xed7e	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.167.161.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:29.947082996 CET	1.1.1.1	192.168.2.7	0xed7e	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.166.199.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:29.947082996 CET	1.1.1.1	192.168.2.7	0xed7e	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.162.38.120	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:30.311429024 CET	1.1.1.1	192.168.2.7	0x6c8a	No error (0)	www.harbour-plaza.com	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:30.311429024 CET	1.1.1.1	192.168.2.7	0x6c8a	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.166.199.244	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:30.311429024 CET	1.1.1.1	192.168.2.7	0x6c8a	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.167.161.134	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:30.311429024 CET	1.1.1.1	192.168.2.7	0x6c8a	No error (0)	Harbour-Plaza-Web-ALB-331433193.ap-east-1.elb.amazonaws.com		18.162.38.120	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:32.681690931 CET	1.1.1.1	192.168.2.7	0x75dc	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:32.681690931 CET	1.1.1.1	192.168.2.7	0x75dc	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:36.117197990 CET	1.1.1.1	192.168.2.7	0xc1f0	No error (0)	tt.mbww.com	d1qhwtvus78xy7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:36.118474007 CET	1.1.1.1	192.168.2.7	0x6ca3	No error (0)	onboard.triptease.io	onboard.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:36.138242006 CET	1.1.1.1	192.168.2.7	0x95a9	No error (0)	onboard.triptease.io	onboard.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:36.143022060 CET	1.1.1.1	192.168.2.7	0xc1f8	No error (0)	tt.mbww.com	d1qhwtvus78xy7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:36.168993950 CET	1.1.1.1	192.168.2.7	0xdea	No error (0)	tt.mbww.com	d1qhwtvus78xy7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:37.904814005 CET	1.1.1.1	192.168.2.7	0xbdf0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:37.904814005 CET	1.1.1.1	192.168.2.7	0xbdf0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.208333015 CET	1.1.1.1	192.168.2.7	0x2c53	No error (0)	harbourplazahotel.122.2o7.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.208333015 CET	1.1.1.1	192.168.2.7	0x2c53	No error (0)	harbourplazahotel.122.2o7.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.208333015 CET	1.1.1.1	192.168.2.7	0x2c53	No error (0)	harbourplazahotel.122.2o7.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.209990978 CET	1.1.1.1	192.168.2.7	0x3c2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 30, 2024 03:47:38.210577965 CET	1.1.1.1	192.168.2.7	0x49ea	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.321552992 CET	1.1.1.1	192.168.2.7	0xd7dc	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:38.321552992 CET	1.1.1.1	192.168.2.7	0xd7dc	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:38.322002888 CET	1.1.1.1	192.168.2.7	0xc037	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:40.367544889 CET	1.1.1.1	192.168.2.7	0x5a0c	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.367562056 CET	1.1.1.1	192.168.2.7	0xe8dc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 03:47:40.412262917 CET	1.1.1.1	192.168.2.7	0xb55d	No error (0)	onboard.triptease.io	onboard.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:40.424696922 CET	1.1.1.1	192.168.2.7	0xc251	No error (0)	onboard.triptease.io	onboard.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:40.534261942 CET	1.1.1.1	192.168.2.7	0xbf27	No error (0)	googleads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.535231113 CET	1.1.1.1	192.168.2.7	0x64ac	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 30, 2024 03:47:40.537405968 CET	1.1.1.1	192.168.2.7	0x767b	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:40.537453890 CET	1.1.1.1	192.168.2.7	0x8984	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:40.537453890 CET	1.1.1.1	192.168.2.7	0x8984	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.556237936 CET	1.1.1.1	192.168.2.7	0xa838	No error (0)	onboard.triptease.io	onboard.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:40.606368065 CET	1.1.1.1	192.168.2.7	0xbcf8	No error (0)	onboard.triptease.io	onboard.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:40.608072042 CET	1.1.1.1	192.168.2.7	0xc6d6	No error (0)	harbourplazahotel.122.2o7.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.608072042 CET	1.1.1.1	192.168.2.7	0xc6d6	No error (0)	harbourplazahotel.122.2o7.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:40.608072042 CET	1.1.1.1	192.168.2.7	0xc6d6	No error (0)	harbourplazahotel.122.2o7.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:41.610690117 CET	1.1.1.1	192.168.2.7	0xc90e	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:41.610949993 CET	1.1.1.1	192.168.2.7	0xe6e9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 03:47:44.600182056 CET	1.1.1.1	192.168.2.7	0xe30a	No error (0)	td.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.734285116 CET	1.1.1.1	192.168.2.7	0xadb7	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:45.734285116 CET	1.1.1.1	192.168.2.7	0xadb7	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.734285116 CET	1.1.1.1	192.168.2.7	0xadb7	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.734285116 CET	1.1.1.1	192.168.2.7	0xadb7	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.734285116 CET	1.1.1.1	192.168.2.7	0xadb7	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.743391991 CET	1.1.1.1	192.168.2.7	0x4c75	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.743391991 CET	1.1.1.1	192.168.2.7	0x4c75	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.743391991 CET	1.1.1.1	192.168.2.7	0x4c75	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:45.743391991 CET	1.1.1.1	192.168.2.7	0x4c75	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:47:54.726089001 CET	1.1.1.1	192.168.2.7	0x40d1	No error (0)	targeted-messages.triptease.io	targeted-messages.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:54.728068113 CET	1.1.1.1	192.168.2.7	0x8719	No error (0)	static-meta.triptease.io	q.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:54.728498936 CET	1.1.1.1	192.168.2.7	0xd505	No error (0)	targeted-messages.triptease.io	targeted-messages.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:54.728992939 CET	1.1.1.1	192.168.2.7	0x3eaa	No error (0)	b.triptease.io	prod.q.ssl.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:54.730057001 CET	1.1.1.1	192.168.2.7	0x2c62	No error (0)	b.triptease.io	prod.q.ssl.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:54.740698099 CET	1.1.1.1	192.168.2.7	0x598f	No error (0)	static-meta.triptease.io	q.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:55.770912886 CET	1.1.1.1	192.168.2.7	0x3928	No error (0)	b.triptease.io	prod.q.ssl.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:55.771940947 CET	1.1.1.1	192.168.2.7	0xe2e6	No error (0)	b.triptease.io	prod.q.ssl.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:55.887865067 CET	1.1.1.1	192.168.2.7	0xec8b	No error (0)	static-meta.triptease.io	q.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:55.903548956 CET	1.1.1.1	192.168.2.7	0xbcf7	No error (0)	static-meta.triptease.io	q.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:56.696532011 CET	1.1.1.1	192.168.2.7	0x2e7e	No error (0)	b.triptease.io	prod.q.ssl.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:56.705893040 CET	1.1.1.1	192.168.2.7	0x3549	No error (0)	targeted-messages.triptease.io	targeted-messages.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:56.713659048 CET	1.1.1.1	192.168.2.7	0x445e	No error (0)	targeted-messages.triptease.io	targeted-messages.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:56.722054005 CET	1.1.1.1	192.168.2.7	0xfec4	No error (0)	b.triptease.io	prod.q.ssl.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:56.741027117 CET	1.1.1.1	192.168.2.7	0x4fb9	No error (0)	targeted-messages.triptease.io	targeted-messages.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:56.747454882 CET	1.1.1.1	192.168.2.7	0x1c59	No error (0)	targeted-messages.triptease.io	targeted-messages.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:57.572349072 CET	1.1.1.1	192.168.2.7	0xd6fc	No error (0)	messages.guest-experience.triptease.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:47:57.579075098 CET	1.1.1.1	192.168.2.7	0x2676	No error (0)	messages.guest-experience.triptease.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:48:00.428349018 CET	1.1.1.1	192.168.2.7	0x8c4e	No error (0)	api.triptease.io	api.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:48:00.429106951 CET	1.1.1.1	192.168.2.7	0xb889	No error (0)	api.triptease.io	api.triptease.io.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:48:00.439672947 CET	1.1.1.1	192.168.2.7	0xa6a3	No error (0)	messages.guest-experience.triptease.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:48:00.460838079 CET	1.1.1.1	192.168.2.7	0x165b	No error (0)	messages.guest-experience.triptease.io	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:48:22.704969883 CET	1.1.1.1	192.168.2.7	0x2185	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:48:22.704969883 CET	1.1.1.1	192.168.2.7	0x2185	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 03:48:36.106014967 CET	1.1.1.1	192.168.2.7	0xf2c9	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 03:48:36.106014967 CET	1.1.1.1	192.168.2.7	0xf2c9	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.harbour-plaza.com

https:

harbourplazahotel.122.2o7.net

googleads.g.doubleclick.net

d.turn.com

www.google.com

td.doubleclick.net

analytics.google.com

stats.g.doubleclick.net

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49704	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:25 UTC	684	OUT	GET /group/en/staff-offer HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:25 UTC	777	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800
2024-10-30 02:47:25 UTC	8162	IN	Data Raw: 31 66 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 32 30 32 34 2d 31 30 2d 31 35 20 31 37 3a 35 32 3a 30 30 20 2b 30 38 3a 30 30 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 77 65 62 73 69 74 65 2d 69 64 3d 22 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 35 66 37 61 66 30 63 34 63 32 33 35 61 37 34 37 34 32 35 64 35 36 64 32 22 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 35 66 36 31 62 34 34 34 38 65 33 30 65 36 34 64 36 62 33 38 65 37 37 66 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 43 4b 20 47 72 6f 75 70 20 53 74 61 66 66 20 4f 66 66 65 72 3c 2f Data Ascii: 1fda<!DOCTYPE html>... Last Published: 2024-10-15 17:52:00 +08:00 --><html website-id="9" lang="en-us" data-wf-page="5f7af0c4c235a747425d56d2" data-wf-site="5f61b4448e30e64d6b38e77f"><head><meta charset="utf-8"><title>CK Group Staff Offer</
2024-10-30 02:47:25 UTC	8914	IN	Data Raw: 32 32 63 61 0d 0a 6e 2e 6a 73 22 3e 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6e 6f 73 63 72 69 70 74 3e 0d 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 22 3e 0d 0a 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 76 69 65 77 74 68 72 6f 75 67 68 63 6f 6e 76 65 72 73 69 6f 6e 2f 39 34 35 35 36 36 32 34 30 2f 3f 76 61 6c 75 65 3d 30 26 61 6d 70 3b 67 75 69 64 3d 4f 4e 26 61 6d 70 3b 73 63 72 69 70 74 3d 30 22 2f 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c Data Ascii: 22can.js"></script><noscript><div style="display:inline;"><img height="1" width="1" style="border-style:none;" alt="" src="https://googleads.g.doubleclick.net/pagead/viewthroughconversion/945566240/?value=0&guid=ON&script=0"/></div><
2024-10-30 02:47:25 UTC	16384	IN	Data Raw: 36 33 32 38 0d 0a 6e 5f 6c 69 6e 6b 20 77 2d 64 72 6f 70 64 6f 77 6e 2d 6c 69 6e 6b 22 20 6f 6e 63 6c 69 63 6b 3d 27 63 68 61 6e 67 65 6c 61 6e 67 28 22 2f 67 72 6f 75 70 2f 22 2c 20 22 65 6e 22 2c 20 22 6a 70 22 29 3b 27 3e e6 97 a5 e6 9c ac e8 aa 9e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6e 61 76 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 6f 6b 69 6e 67 5f 62 6c 6f 63 6b 5f 5f 68 6f 6c 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 5f 62 6f 6f Data Ascii: 6328n_link w-dropdown-link" onclick='changelang("/group/", "en", "jp");'></a> </nav></div> <div class="booking_block__holder"> <a href="#" class="header_boo
2024-10-30 02:47:26 UTC	9008	IN	Data Raw: 20 63 6c 61 73 73 3d 22 73 74 61 66 66 2d 6f 66 66 65 72 5f 5f 62 6c 6b 2d 69 74 65 6d 22 3e 0a 3c 68 33 20 63 6c 61 73 73 3d 22 73 74 61 66 66 2d 6f 66 66 65 72 5f 5f 62 6c 6b 2d 74 69 74 6c 65 22 3e 4b 6f 77 6c 6f 6f 6e 20 48 61 72 62 6f 75 72 66 72 6f 6e 74 20 48 6f 74 65 6c 3c 2f 68 33 3e 0a 3c 61 20 68 72 65 66 3d 22 2f 6b 6f 77 6c 6f 6f 6e 68 61 72 62 6f 75 72 66 72 6f 6e 74 2f 65 6e 2f 73 74 61 66 66 2d 6f 66 66 65 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 67 72 6f 75 70 2f 66 69 6c 65 73 2f 70 61 67 65 2f 37 33 37 2f 4b 48 46 48 39 2e 6a 70 67 22 20 61 6c 74 3d 22 22 20 2f 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 61 66 Data Ascii: class="staff-offer__blk-item"><h3 class="staff-offer__blk-title">Kowloon Harbourfront Hotel</h3><a href="/kowloonharbourfront/en/staff-offer" target="_blank" rel="noopener"><img src="/group/files/page/737/KHFH9.jpg" alt="" /></a></div><div class="staf
2024-10-30 02:47:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49705	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:25 UTC	709	OUT	GET /css/normalize.css?v=6db607ad2bdb9d3c78515094fcc56a567f4a4036139c47bbfe143c63769d4445d9147837fe9aa41fdebeac49979830cf9be295a3b9a3206c679db36c01d12eee HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:26 UTC	861	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:26 GMT Content-Type: text/css Content-Length: 8127 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-1fbf" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:26 UTC	8083	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0d 0a 2f 2a 2a 0d 0a 20 2a 20 31 2e 20 53 65 74 20 64 65 66 61 75 6c 74 20 66 6f 6e 74 20 66 61 6d 69 6c 79 20 74 6f 20 73 61 6e 73 2d 73 65 72 69 66 2e 0d 0a 20 2a 20 32 2e 20 50 72 65 76 65 6e 74 20 69 4f 53 20 61 6e 64 20 49 45 20 74 65 78 74 20 73 69 7a 65 20 61 64 6a 75 73 74 20 61 66 74 65 72 20 64 65 76 69 63 65 20 6f 72 69 65 6e 74 61 74 69 6f 6e 20 63 68 61 6e 67 65 2c 0d 0a 20 2a 20 20 20 20 77 69 74 68 6f 75 74 20 64 69 73 61 62 6c 69 6e 67 20 75 73 65 72 20 7a 6f 6f 6d 2e 0d 0a 20 2a 2f 0d 0a 68 74 6d 6c 20 7b 0d 0a 20 Data Ascii: /! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css //** * 1. Set default font family to sans-serif. * 2. Prevent iOS and IE text size adjust after device orientation change, * without disabling user zoom. */html {
2024-10-30 02:47:26 UTC	44	IN	Data Raw: 70 61 63 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 74 64 2c 0d 0a 74 68 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a Data Ascii: pacing: 0;}td,th { padding: 0;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49716	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:27 UTC	710	OUT	GET /css/components.css?v=d37a2ecfeceecad909e00348ab25fd11d55302909d6209359930dbbeb11e665f635573c8bf863b22e8a32243b188017a74b9e6fa24ba6dcf2e94be876e6d774c HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:28 UTC	862	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:27 GMT Content-Type: text/css Content-Length: 40864 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-9fa0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:28 UTC	15522	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 27 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 54 46 77 33 48 41 41 41 45 6e 41 41 41 41 44 5a 6f 61 47 56 68 43 58 59 46 67 51 41 41 42 4e 51 41 41 41 41 6b 61 47 31 Data Ascii: @font-face { font-family: 'webflow-icons'; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQTFw3HAAAEnAAAADZoaGVhCXYFgQAABNQAAAAkaG1
2024-10-30 02:47:28 UTC	1509	IN	Data Raw: 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 39 70 78 29 20 7b 0d 0a 20 20 2e 77 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 77 2d 68 69 64 64 65 6e 2d 6d 61 69 6e 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 77 2d 68 69 64 64 65 6e 2d 6d 65 64 69 75 6d 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 77 2d 68 69 64 64 65 6e 2d 73 6d 61 6c 6c 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: edia screen and (max-width: 479px) { .w-container { max-width: none; } .w-hidden-main { display: inherit !important; } .w-hidden-medium { display: inherit !important; } .w-hidden-small { display: inherit !important
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 7d 0d 0a 2e 77 2d 77 69 64 67 65 74 2d 74 77 69 74 74 65 72 2d 63 6f 75 6e 74 2d 73 68 69 6d 20 2a 20 7b 0d 0a 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 77 2d 77 69 64 67 65 74 2d 74 77 69 74 74 65 72 2d 63 6f 75 6e 74 2d 73 68 69 6d 20 2e 77 2d 77 69 64 67 65 74 2d 74 77 69 74 74 65 72 2d 63 6f 75 6e 74 2d 69 6e 6e 65 72 20 7b Data Ascii: border-radius: 3px;}.w-widget-twitter-count-shim * { pointer-events: none; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none;}.w-widget-twitter-count-shim .w-widget-twitter-count-inner {
2024-10-30 02:47:28 UTC	7449	IN	Data Raw: 0a 7d 0d 0a 2e 77 2d 72 69 63 68 74 65 78 74 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 2e 77 2d 72 69 63 68 74 65 78 74 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 3a 62 65 66 6f 72 65 2c 0d 0a 2e 77 2d 72 69 63 68 74 65 78 74 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 3a 61 66 74 65 72 20 7b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 69 6e 69 74 69 61 6c 3b 0d 0a 7d 0d 0a 2e 77 2d 72 69 63 68 74 65 78 74 20 6f 6c 2c 0d 0a 2e 77 2d 72 69 63 68 74 65 78 74 20 75 6c 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 2e 77 2d 72 69 63 68 74 65 78 74 20 2e 77 2d 72 69 63 68 74 65 78 74 2d 66 69 67 75 72 65 2d 73 65 6c Data Ascii: }.w-richtext:after { clear: both;}.w-richtext[contenteditable="true"]:before,.w-richtext[contenteditable="true"]:after { white-space: initial;}.w-richtext ol,.w-richtext ul { overflow: hidden;}.w-richtext .w-richtext-figure-sel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49710	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:27 UTC	713	OUT	GET /css/harbour-plaza.css?v=ca0584777c36ab01fbd8b2ca9a8482995cae36ae64feca37d732da937fcea17d5dbdc09b6b68905c6ef3eb20ce7cb6c1dfb3a6b582802f6b2103624e668e04c1 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:28 UTC	864	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:27 GMT Content-Type: text/css Content-Length: 104776 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 14:05:50 GMT Vary: Accept-Encoding ETag: "65e726be-19948" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:28 UTC	15520	IN	Data Raw: 62 6f 64 79 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4c 61 74 6f 2c 20 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 22 2c 20 e5 be ae e8 bb 9f e6 ad a3 e9 bb 91 e9 ab 94 2c 20 e5 be ae e8 bb 9f e9 9b 85 e9 bb 91 e9 ab 94 2c 20 22 e9 bb 91 e4 bd 93 22 2c 0d 0a 20 20 20 20 20 20 20 20 22 41 72 69 61 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 5b 6c 61 6e 67 3d 22 6a 61 2d 6a 70 22 5d 20 62 6f 64 79 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 e3 83 92 e3 83 a9 e3 Data Ascii: body { font-family: Lato, "Microsoft JhengHei", , , "", "Arial", sans-serif !important; color: #555; font-size: 15px; line-height: 22px;}[lang="ja-jp"] body{ font-family: '
2024-10-30 02:47:28 UTC	1509	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 61 72 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 20 74 6f 70 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 72 6f 6d 28 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 32 35 25 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 29 0d 0a 20 20 20 20 20 20 20 20 29 2c 0d 0a 20 20 20 20 20 20 20 20 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 5f 62 61 6e 6e 65 72 5f 69 6d 67 31 2e 6a 70 67 22 29 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e Data Ascii: -webkit-gradient( linear, left top, left bottom, from(rgba(0, 0, 0, 0.1)), color-stop(25%, transparent) ), url("../images/home_banner_img1.jpg"); background-image: lin
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 32 35 25 0d 0a 20 20 20 20 20 20 20 20 29 2c 0d 0a 20 20 20 20 20 20 20 20 75 72 6c 28 22 2e 2e 2f 69 6d 61 67 65 73 2f 68 67 5f 68 6f 6d 65 5f 62 61 6e 6e 65 72 5f 69 6d 67 33 2e 6a 70 67 22 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 6f 6d 65 5f 62 61 6e 6e 65 72 5f 69 6d 67 2e 68 67 32 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 61 72 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 20 74 6f 70 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 72 6f 6d 28 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 29 2c 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: 25% ), url("../images/hg_home_banner_img3.jpg");}.home_banner_img.hg2 { background-image: -webkit-gradient( linear, left top, left bottom, from(rgba(0, 0, 0, 0.1)),
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 32 30 70 78 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 Data Ascii: x; display: -webkit-flex; display: -ms-flexbox; display: flex; width: 100%; height: 420px; -webkit-box-pack: center; -webkit-justify-content: center; -ms-flex-pack: center; justify-content: center; -webkit
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 66 66 65 72 73 5f 69 6e 64 65 78 5f 62 74 6e 5f 69 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 66 66 65 72 73 5f 69 6e 64 65 78 5f 62 74 6e 5f 69 6e 2e 77 2d 2d 63 75 72 72 65 6e 74 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 63 30 32 34 32 38 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 66 66 65 72 73 5f 69 6e 64 65 78 5f 62 74 6e 20 7b Data Ascii: -bottom: 2px solid transparent; font-size: 24px; line-height: 28px; font-weight: 300;}.offers_index_btn_in:hover { opacity: 0.7;}.offers_index_btn_in.w--current { border-bottom-color: #c02428;}.offers_index_btn {
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 69 6e 67 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 68 67 5f 64 69 6e 69 6e 67 5f 73 75 62 74 69 74 6c 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 68 67 5f 64 69 6e 69 6e 67 5f 74 61 67 6c 69 6e 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 38 70 78 3b 0d 0a 20 20 20 Data Ascii: ing-right: 40px; } .hg_dining_subtitle { font-size: 15px; line-height: 28px; } .hg_dining_tagline { padding-top: 20px; padding-bottom: 20px; font-size: 36px; line-height: 48px;
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 68 67 5f 65 78 74 72 61 5f 68 65 61 64 65 72 5f 6c 69 6e 65 2e 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: padding-top: 8px; padding-right: 8px; padding-bottom: 8px; font-size: 13px; line-height: 19px; } .hg_extra_header_line.menu { display: none; margin-right: 5px; margin-left:
2024-10-30 02:47:28 UTC	5827	IN	Data Raw: 25 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 7d 0d 0a 2e 72 65 73 74 61 75 72 61 6e 74 5f 6f 70 65 6e 5f 68 6f 75 72 73 20 74 64 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 7d 0d 0a 0d 0a 0d 0a 23 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 46 6f 72 6d 20 2e 70 61 67 65 2d 61 63 63 6f 72 64 69 6f 6e 5f 5f 63 6f 6e 74 65 6e 74 20 3e 20 68 33 7b 20 6d 61 72 67 69 6e 3a 36 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 20 7d 0d 0a 23 71 75 65 73 74 69 6f 6e 6e 61 69 72 65 46 6f 72 6d 20 2e 70 61 67 65 2d 66 6f 72 6d 5f 5f 66 69 65 6c 64 2d 74 69 74 6c 65 7b 20 66 6c 65 78 3a 32 3b 20 7d 0d 0a 23 71 75 65 73 74 69 6f 6e 6e 61 69 Data Ascii: %; padding-bottom: 10px;}.restaurant_open_hours td:last-of-type{ text-align: right;}#questionnaireForm .page-accordion__content > h3{ margin:60px 0px 0px 0px; font-weight:bold; }#questionnaireForm .page-form__field-title{ flex:2; }#questionnai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49711	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:27 UTC	711	OUT	GET /css/animate.min.css?v=7474c793f5bb931c0f6f5c31c07022ae2f2be5e9010bbe0c74b9d393af881b97368d9c800b912d717ada0cd0d89c6acd070d18fcbcf5220504b6cce0cd612d94 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:28 UTC	862	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:27 GMT Content-Type: text/css Content-Length: 12897 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-3261" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:28 UTC	12897	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 33 2e 37 2e 30 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 20 2a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 44 61 6e 69 65 6c 20 45 64 65 6e 20 2a 2f 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 7b 30 25 2c 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d Data Ascii: @charset "UTF-8";/! animate.css -http://daneden.me/animate * Version - 3.7.0 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2018 Daniel Eden */@-webkit-keyframes bounceIn{0%,20%,40%,60%,80%,to{-webkit-animation-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49709	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:27 UTC	706	OUT	GET /css/styles.css?v=df42682342af4b30687beb0bc1c68f96cd780f89414a036ed8c17dbe031fcd8004946c5ccea0f2b36ccd7bfdd4bacea3edb59cda81b4afdedfdbeeb3fdb91ab9 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:28 UTC	863	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:27 GMT Content-Type: text/css Content-Length: 72782 Connection: close Server: nginx Last-Modified: Wed, 14 Feb 2024 05:17:23 GMT Vary: Accept-Encoding ETag: "65cc4ce3-11c4e" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:28 UTC	15521	IN	Data Raw: 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 48 69 64 64 65 6e 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 3a 6e 6f 74 28 2e 68 65 61 64 65 72 2d 64 72 6f 70 64 6f 77 6e 29 20 2e 66 6f 72 2d 64 72 6f 70 64 6f 77 6e 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 68 65 61 64 65 72 2d 64 72 6f 70 64 6f 77 6e 20 2e 68 65 61 64 65 72 5f 63 65 6e 74 65 72 5f 62 74 6e 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 68 65 61 64 65 72 2d Data Ascii: button { background-color: transparent;}body.overflowHidden { overflow: hidden !important;}body:not(.header-dropdown) .for-dropdown { display: none;}body.header-dropdown .header_center_btn { color: #262626;}body.header-
2024-10-30 02:47:28 UTC	1509	IN	Data Raw: 64 65 72 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 62 62 39 37 36 35 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 62 62 39 37 36 35 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 74 68 65 6d 65 2d 68 61 72 62 6f 75 72 2d 70 6c 61 7a 61 20 2e 61 63 74 69 76 65 20 3e 20 2e 68 65 61 64 65 72 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 2c 20 62 6f 64 79 2e 74 68 65 6d 65 2d 68 61 72 62 6f 75 72 2d 70 6c 61 7a 61 20 2e 68 65 61 64 65 72 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 38 37 2c 20 31 35 31 2c 20 31 30 31 2c 20 30 2e 38 29 3b 0d 0a 20 20 62 6f 72 Data Ascii: der_book_now_btn:hover { background-color: #bb9765; border: 1px solid #bb9765;}body.theme-harbour-plaza .active > .header_book_now_btn, body.theme-harbour-plaza .header_book_now_btn:hover { background-color: rgba(187, 151, 101, 0.8); bor
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 7d 0d 0a 0d 0a 2e 66 6c 6f 61 74 69 6e 67 2d 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6c 6f 61 74 69 6e 67 2d 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 20 20 62 6f 72 Data Ascii: }.floating-header .header_book_now_btn { background-color: transparent !important; border: none !important; padding-top: 8px; padding-bottom: 8px;}.floating-header .header_book_now_btn:hover { background-color: transparent; bor
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 61 67 65 2d 66 6f 72 6d 20 61 3a 6e 6f 74 28 2e 72 6f 6f 6d 5f 64 65 74 61 69 6c 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 29 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 30 32 34 32 38 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 74 68 65 6d 65 2d 72 61 6d 62 6c 65 72 20 2e 70 61 67 65 2d 66 6f 72 6d 20 61 3a 6e 6f 74 28 2e 72 6f 6f 6d 5f 64 65 74 61 69 6c 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 29 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 62 33 64 37 32 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 74 68 65 6d 65 2d 61 6c 65 78 61 6e 64 72 61 20 2e 70 61 67 65 2d 66 6f 72 6d 20 61 3a 6e 6f 74 28 2e 72 6f 6f 6d 5f 64 65 74 61 69 6c 5f 62 6f 6f 6b 5f 6e 6f 77 5f 62 74 6e 29 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 2d 66 Data Ascii: age-form a:not(.room_detail_book_now_btn) { color: #c02428;}body.theme-rambler .page-form a:not(.room_detail_book_now_btn) { color: #9b3d72;}body.theme-alexandra .page-form a:not(.room_detail_book_now_btn) { color: #333;}.page-f
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 65 6d 65 2d 61 6c 65 78 61 6e 64 72 61 0d 0a 2e 68 67 5f 6d 65 65 74 69 6e 67 5f 62 6c 6f 63 6b 3a 68 6f 76 65 72 2c 20 62 6f 64 79 2e 74 68 65 6d 65 2d 61 6c 65 78 61 6e 64 72 61 0d 0a 2e 68 6f 6d 65 5f 63 66 61 5f 62 74 6e 2e 68 67 5f 64 69 6e 69 6e 67 2c 20 62 6f 64 79 2e 74 68 65 6d 65 2d 61 6c 65 78 61 6e 64 72 61 0d 0a 2e 68 6f 6d 65 5f 73 6c 69 64 65 5f 6c 69 6e 6b 2e 68 67 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 74 68 65 6d 65 2d 72 61 6d 62 6c 65 72 20 2e 68 6f 6d 65 5f 73 6c 69 64 65 5f 6c 69 6e 6b 2e 68 67 3a 68 6f 76 65 72 2c 0d 0a 62 6f 64 79 2e 74 68 65 6d 65 2d 72 61 6d 62 6c 65 72 20 2e 66 6f 6f 74 65 72 5f 69 6e 66 6f 5f 74 69 74 6c 65 2e 68 67 20 7b 0d 0a 20 20 63 6f 6c Data Ascii: eme-alexandra.hg_meeting_block:hover, body.theme-alexandra.home_cfa_btn.hg_dining, body.theme-alexandra.home_slide_link.hg:hover { color: #fff;}body.theme-rambler .home_slide_link.hg:hover,body.theme-rambler .footer_info_title.hg { col
2024-10-30 02:47:28 UTC	6600	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 39 62 33 64 37 32 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 74 68 65 6d 65 2d 61 6c 65 78 61 6e 64 72 61 20 2e 63 6f 6d 6d 6f 6e 2d 74 61 67 5f 5f 62 74 6e 3a 61 66 74 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 74 68 65 6d 65 2d 68 61 72 62 6f 75 72 2d 67 72 61 6e 64 20 2e 66 75 6c 6c 5f 73 69 6e 67 6c 65 5f 69 6d 67 2d 2d 77 69 74 68 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 20 62 6f 64 79 2e 74 68 65 6d 65 2d 68 61 72 62 6f 75 72 2d 67 72 61 6e 64 0d 0a 2e 70 61 67 65 2d 66 6f 72 6d 5f 5f 66 69 65 6c 64 2d 74 69 74 6c 65 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 39 37 36 35 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 74 68 65 6d Data Ascii: round-color: #9b3d72;}body.theme-alexandra .common-tag__btn:after { background-color: #333;}body.theme-harbour-grand .full_single_img--with-text a:hover, body.theme-harbour-grand.page-form__field-title { color: #bb9765;}body.them

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49712	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:27 UTC	700	OUT	GET /js/jquery-3.5.1.min.js?v=5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:28 UTC	877	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:27 GMT Content-Type: application/javascript Content-Length: 89478 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-15d86" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:28 UTC	15507	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-30 02:47:28 UTC	16379	IN	Data Raw: 3d 3d 72 3f 69 26 26 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 2a 3d 22 3d 3d 3d 72 3f 69 26 26 2d 31 3c 74 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 24 3d 22 3d 3d 3d 72 3f 69 26 26 74 2e 73 6c 69 63 65 28 2d 69 2e 6c 65 6e 67 74 68 29 3d 3d 3d 69 3a 22 7e 3d 22 3d 3d 3d 72 3f 2d 31 3c 28 22 20 22 2b 74 2e 72 65 70 6c 61 63 65 28 42 2c 22 20 22 29 2b 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 7c 3d 22 3d 3d 3d 72 26 26 28 74 3d 3d 3d 69 7c 7c 74 2e 73 6c 69 63 65 28 30 2c 69 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 69 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 65 2c 74 2c 67 2c 76 29 7b 76 61 72 20 79 3d 22 6e 74 68 22 21 3d 3d 68 2e 73 6c 69 63 65 28 30 2c 33 29 2c 6d 3d 22 6c 61 73 74 22 21 3d 3d 68 2e Data Ascii: ==r?i&&0===t.indexOf(i):"*="===r?i&&-1<t.indexOf(i):"$="===r?i&&t.slice(-i.length)===i:"~="===r?-1<(" "+t.replace(B," ")+" ").indexOf(i):"\|="===r&&(t===i\|\|t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 66 6e 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 46 2e 74 68 65 6e 28 65 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 29 2c 74 68 69 73 7d 2c 53 2e 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 21 30 3d 3d 3d 65 3f 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 3a 53 2e 69 73 52 65 61 64 79 29 7c 7c 28 53 2e 69 73 52 65 61 64 79 3d 21 30 29 21 3d 3d 65 26 26 30 3c 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 7c 7c 46 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 45 2c 5b 53 5d 29 7d 7d 29 2c 53 2e 72 65 61 64 79 2e 74 68 65 6e 3d 46 2e 74 68 65 6e 2c 22 63 Data Ascii: fn.ready=function(e){return F.then(e)["catch"](function(e){S.readyException(e)}),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)\|\|(S.isReady=!0)!==e&&0<--S.readyWait\|\|F.resolveWith(E,[S])}}),S.ready.then=F.then,"c
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 66 3b 63 2b 2b 29 75 3d 65 2c 63 21 3d 3d 70 26 26 28 75 3d 53 2e 63 6c 6f 6e 65 28 75 2c 21 30 2c 21 30 29 2c 73 26 26 53 2e 6d 65 72 67 65 28 61 2c 76 65 28 75 2c 22 73 63 72 69 70 74 22 29 29 29 2c 69 2e 63 61 6c 6c 28 6e 5b 63 5d 2c 75 2c 63 29 3b 69 66 28 73 29 66 6f 72 28 6c 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 53 2e 6d 61 70 28 61 2c 48 65 29 2c 63 3d 30 3b 63 3c 73 3b 63 2b 2b 29 75 3d 61 5b 63 5d 2c 68 65 2e 74 65 73 74 28 75 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 59 2e 61 63 63 65 73 73 28 75 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 53 2e 63 6f 6e 74 61 69 6e 73 28 6c 2c 75 29 26 26 28 75 2e 73 72 63 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 75 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f Data Ascii: f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0),s&&S.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,S.map(a,He),c=0;c<s;c++)u=a[c],he.test(u.type\|\|"")&&!Y.access(u,"globalEval")&&S.contains(l,u)&&(u.src&&"module"!==(u.type\|\|"").toLo
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 74 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 28 65 3d 6e 5b 74 5d 29 28 29 7c 7c 6e 5b 74 5d 21 3d 3d 65 7c 7c 6e 2e 73 70 6c 69 63 65 28 74 2d 2d 2c 31 29 3b 6e 2e 6c 65 6e 67 74 68 7c 7c 53 2e 66 78 2e 73 74 6f 70 28 29 2c 74 74 3d 76 6f 69 64 20 30 7d 2c 53 2e 66 78 2e 74 69 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 65 29 2c 53 2e 66 78 2e 73 74 61 72 74 28 29 7d 2c 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 7c 7c 28 6e 74 3d 21 30 2c 73 74 28 29 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 3d 6e 75 6c 6c 7d 2c 53 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 Data Ascii: tt=Date.now();t<n.length;t++)(e=n[t])()\|\|n[t]!==e\|\|n.splice(t--,1);n.length\|\|S.fx.stop(),tt=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){nt\|\|(nt=!0,st())},S.fx.stop=function(){nt=null},S.fx.speeds={s
2024-10-30 02:47:28 UTC	8440	IN	Data Raw: 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 28 74 68 69 73 29 2c 74 3d 65 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 74 2e 6c 65 6e 67 74 68 3f 74 2e 77 72 61 70 41 6c 6c 28 6e 29 3a 65 2e 61 70 70 65 6e 64 28 6e 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6d 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 6e 3f 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3a 74 29 7d 29 7d 2c 75 6e 77 72 61 70 3a 66 75 6e 63 74 69 6f Data Ascii: this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.contents();t.length?t.wrapAll(n):e.append(n)})},wrap:function(t){var n=m(t);return this.each(function(e){S(this).wrapAll(n?t.call(this,e):t)})},unwrap:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49715	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:27 UTC	697	OUT	GET /js/harbour-plaza.js?v=63c898e7a1c43e391f18724e7cd8b0e0d236bc5aa25cc5bc1fa509562a584e616a39cb1dbe896c7f8a69fafdd3a1bfb54934aec098a1640ad9c7e6fe50d1f4bf HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:28 UTC	878	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:27 GMT Content-Type: application/javascript Content-Length: 573427 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-8bff3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:28 UTC	15506	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0d 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0d 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0d 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0d 0a 20 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0d 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); //***/ (function(modules) { // webpackBootstrap/****/
2024-10-30 02:47:28 UTC	1509	IN	Data Raw: 65 62 66 6c 6f 77 2e 6c 6f 61 64 20 2d 20 41 64 64 20 61 20 77 69 6e 64 6f 77 20 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 74 68 61 74 20 77 69 6c 6c 20 72 75 6e 20 65 76 65 6e 20 69 66 20 6c 6f 61 64 20 65 76 65 6e 74 20 68 61 73 20 61 6c 72 65 61 64 79 20 68 61 70 70 65 6e 65 64 0d 0a 20 2a 20 40 70 61 72 61 6d 20 20 7b 66 75 6e 63 74 69 6f 6e 7d 20 68 61 6e 64 6c 65 72 0d 0a 20 2a 2f 0d 0a 0d 0a 0d 0a 76 61 72 20 64 65 66 65 72 4c 6f 61 64 3b 0d 0a 0d 0a 57 65 62 66 6c 6f 77 2e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 68 61 6e 64 6c 65 72 29 20 7b 0d 0a 20 20 64 65 66 65 72 4c 6f 61 64 2e 74 68 65 6e 28 68 61 6e 64 6c 65 72 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 69 6e 64 4c 6f 61 64 28 29 20 7b 0d 0a 20 20 2f 2f 20 52 65 6a Data Ascii: ebflow.load - Add a window load handler that will run even if load event has already happened * @param {function} handler */var deferLoad;Webflow.load = function (handler) { deferLoad.then(handler);};function bindLoad() { // Rej
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 61 74 63 68 65 73 50 72 6f 70 65 72 74 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 33 31 29 2c 0d 0a 20 20 20 20 69 64 65 6e 74 69 74 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 30 29 2c 0d 0a 20 20 20 20 69 73 41 72 72 61 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 31 29 2c 0d 0a 20 20 20 20 70 72 6f 70 65 72 74 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 34 30 29 3b 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 54 68 65 20 62 61 73 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 60 5f 2e 69 74 65 72 61 74 65 65 60 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 70 72 69 76 61 74 65 0d 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 5b 76 61 6c 75 65 Data Ascii: atchesProperty = __webpack_require__(231), identity = __webpack_require__(60), isArray = __webpack_require__(1), property = __webpack_require__(240);/** * The base implementation of `_.iteratee`. * * @private * @param {*} [value
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 7d 0d 0a 0d 0a 2f 2f 20 2d 2d 20 23 23 23 23 20 73 65 74 49 6e 28 29 0d 0a 2f 2f 20 2d 2d 20 52 65 74 75 72 6e 73 20 61 20 6e 65 77 20 6f 62 6a 65 63 74 20 77 69 74 68 20 61 20 6d 6f 64 69 66 69 65 64 20 2a 2a 6e 65 73 74 65 64 2a 2a 20 61 74 74 72 69 62 75 74 65 2e 0d 0a 2f 2f 20 2d 2d 0d 0a 2f 2f 20 2d 2d 20 4e 6f 74 65 73 3a 0d 0a 2f 2f 20 2d 2d 0d 0a 2f 2f 20 2d 2d 20 2a 20 49 66 20 74 68 65 20 70 72 6f 76 69 64 65 64 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 28 2a 72 65 66 65 72 65 6e 74 69 61 6c 6c 79 20 65 71 75 61 6c 20 74 6f 2a 29 0d 0a 2f 2f 20 2d 2d 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 76 61 6c 75 65 2c 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 20 69 73 20 72 65 74 75 72 6e 65 64 2e 0d 0a 2f 2f 20 Data Ascii: }// -- #### setIn()// -- Returns a new object with a modified nested attribute.// --// -- Notes:// --// -- * If the provided value is the same as (referentially equal to)// -- the previous value, the original object is returned.//
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 79 20 74 6f 20 73 65 61 72 63 68 20 66 6f 72 2e 0d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 6e 75 6d 62 65 72 7d 20 52 65 74 75 72 6e 73 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 74 68 65 20 6d 61 74 63 68 65 64 20 76 61 6c 75 65 2c 20 65 6c 73 65 20 60 2d 31 60 2e 0d 0a 20 2a 2f 0d 0a 66 75 6e 63 74 69 6f 6e 20 61 73 73 6f 63 49 6e 64 65 78 4f 66 28 61 72 72 61 79 2c 20 6b 65 79 29 20 7b 0d 0a 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 0d 0a 20 20 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 65 71 28 61 72 72 61 79 5b 6c 65 6e 67 74 68 5d 5b 30 5d 2c 20 6b 65 79 29 29 20 7b 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 7d Data Ascii: y to search for. * @returns {number} Returns the index of the matched value, else `-1`. */function assocIndexOf(array, key) { var length = array.length; while (length--) { if (eq(array[length][0], key)) { return length; } }
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 70 65 60 20 70 72 6f 70 65 72 74 79 20 77 68 69 63 68 20 6d 61 79 20 6e 6f 74 20 62 65 20 60 75 6e 64 65 66 69 6e 65 64 60 2e 20 49 74 20 69 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 75 73 65 0d 0a 20 20 20 2a 20 73 74 72 69 6e 67 20 63 6f 6e 73 74 61 6e 74 73 20 66 6f 72 20 61 63 74 69 6f 6e 20 74 79 70 65 73 2e 0d 0a 20 20 20 2a 0d 0a 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 6a 65 63 74 7d 20 46 6f 72 20 63 6f 6e 76 65 6e 69 65 6e 63 65 2c 20 74 68 65 20 73 61 6d 65 20 61 63 74 69 6f 6e 20 6f 62 6a 65 63 74 20 79 6f 75 20 64 69 73 70 61 74 63 68 65 64 2e 0d 0a 20 20 20 2a 0d 0a 20 20 20 2a 20 4e 6f 74 65 20 74 68 61 74 2c 20 69 66 20 79 6f 75 20 75 73 65 20 61 20 63 75 73 74 6f 6d 20 6d 69 64 64 6c 65 77 61 72 65 2c 20 69 74 20 6d 61 Data Ascii: pe` property which may not be `undefined`. It is a good idea to use * string constants for action types. * * @returns {Object} For convenience, the same action object you dispatched. * * Note that, if you use a custom middleware, it ma
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 47 65 74 54 61 67 3b 0d 0a 0d 0a 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 66 6f 72 20 64 61 74 61 20 76 69 65 77 73 2c 20 6d 61 70 73 2c 20 73 65 74 73 2c 20 61 6e 64 20 77 65 61 6b 20 6d 61 70 73 20 69 6e 20 49 45 20 31 31 20 61 6e 64 20 70 72 6f 6d 69 73 65 73 20 69 6e 20 4e 6f 64 65 2e 6a 73 20 3c 20 36 2e 0d 0a 69 66 20 28 28 44 61 74 61 56 69 65 77 20 26 26 20 67 65 74 54 61 67 28 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 31 29 29 29 20 21 3d 20 64 61 74 61 56 69 65 77 54 61 67 29 20 7c 7c 0d 0a 20 20 20 20 28 4d 61 70 20 26 26 20 67 65 74 54 61 67 28 6e 65 77 20 4d 61 70 29 20 21 3d 20 6d 61 70 54 61 67 29 20 7c 7c 0d 0a 20 20 20 20 28 50 72 6f 6d 69 73 65 20 26 26 20 67 65 74 54 61 67 28 50 72 6f 6d 69 73 65 Data Ascii: GetTag;// Fallback for data views, maps, sets, and weak maps in IE 11 and promises in Node.js < 6.if ((DataView && getTag(new DataView(new ArrayBuffer(1))) != dataViewTag) \|\| (Map && getTag(new Map) != mapTag) \|\| (Promise && getTag(Promise
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 74 28 61 2c 20 31 30 29 20 3a 20 5f 2e 74 65 73 74 28 61 29 20 26 26 20 28 64 20 3d 20 31 65 33 20 2a 20 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 2c 20 30 20 3e 20 64 20 26 26 20 28 64 20 3d 20 30 29 2c 20 64 20 3d 3d 3d 20 64 20 3f 20 64 20 3a 20 63 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 20 7b 0d 0a 20 20 20 20 55 2e 64 65 62 75 67 20 26 26 20 77 69 6e 64 6f 77 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 61 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 20 7b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 62 20 3d 20 2d 31 2c 20 63 20 3d 20 61 20 3f 20 61 2e 6c 65 6e 67 74 68 20 3a 20 30 2c 20 64 20 3d 20 5b 5d 3b 20 2b 2b 62 20 3c 20 63 3b 29 20 7b 0d 0a 20 20 Data Ascii: t(a, 10) : _.test(a) && (d = 1e3 * parseFloat(a)), 0 > d && (d = 0), d === d ? d : c; } function j(a) { U.debug && window && window.console.warn(a); } function k(a) { for (var b = -1, c = a ? a.length : 0, d = []; ++b < c;) {
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 74 68 69 73 2e 67 65 74 28 29 29 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 74 68 69 73 2e 74 77 65 65 6e 3b 0d 0a 20 20 20 20 20 20 61 20 26 26 20 61 2e 63 6f 6e 74 65 78 74 20 26 26 20 61 2e 64 65 73 74 72 6f 79 28 29 3b 0d 0a 20 20 20 20 7d 2c 20 61 2e 63 6f 6e 76 65 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 61 2c 20 62 29 20 7b 0d 0a 20 20 20 20 20 20 69 66 20 28 22 61 75 74 6f 22 20 3d 3d 20 61 20 26 26 20 74 68 69 73 2e 61 75 74 6f 29 20 72 65 74 75 72 6e 20 61 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 63 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 22 6e 75 6d 62 65 72 22 20 3d 3d 20 74 79 70 65 6f 66 20 61 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 66 20 3d 20 22 73 74 72 69 6e 67 22 20 3d 3d 20 74 79 70 65 6f 66 20 61 3b 0d 0a 0d 0a Data Ascii: this.get())); var a = this.tween; a && a.context && a.destroy(); }, a.convert = function (a, b) { if ("auto" == a && this.auto) return a; var c, e = "number" == typeof a, f = "string" == typeof a;
2024-10-30 02:47:28 UTC	16384	IN	Data Raw: 7c 7c 20 69 6e 64 65 78 20 69 6e 20 4f 29 20 26 26 20 4f 5b 69 6e 64 65 78 5d 20 3d 3d 3d 20 65 6c 29 20 72 65 74 75 72 6e 20 49 53 5f 49 4e 43 4c 55 44 45 53 20 7c 7c 20 69 6e 64 65 78 20 7c 7c 20 30 3b 0d 0a 20 20 20 20 7d 20 72 65 74 75 72 6e 20 21 49 53 5f 49 4e 43 4c 55 44 45 53 20 26 26 20 2d 31 3b 0d 0a 20 20 7d 3b 0d 0a 7d 3b 0d 0a 0d 0a 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 7b 0d 0a 20 20 2f 2f 20 60 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 60 20 6d 65 74 68 6f 64 0d 0a 20 20 2f 2f 20 68 74 74 70 73 3a 2f 2f 74 63 33 39 2e 67 69 74 68 75 62 2e 69 6f 2f 65 63 6d 61 32 36 32 2f 23 73 65 63 2d 61 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 0d 0a 20 20 69 6e 63 6c 75 64 65 73 3a 20 Data Ascii: \|\| index in O) && O[index] === el) return IS_INCLUDES \|\| index \|\| 0; } return !IS_INCLUDES && -1; };};module.exports = { // `Array.prototype.includes` method // https://tc39.github.io/ecma262/#sec-array.prototype.includes includes:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:28 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 02:47:29 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=36443 Date: Wed, 30 Oct 2024 02:47:28 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49719	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:29 UTC	691	OUT	GET /js/wow.min.js?v=7e966998cbb05b3e9e28b04dc5f79a54c99e2fc905386d6c00fac819afd60ef061c3f8a3853ff065b40ee77c16f9d1d01f7d6f673133dd491be8c48bbfec8e2e HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:29 UTC	875	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:29 GMT Content-Type: application/javascript Content-Length: 8159 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-1fdf" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:29 UTC	8069	IN	Data Raw: 2f 2a 21 20 57 4f 57 20 77 6f 77 2e 6a 73 20 2d 20 76 31 2e 33 2e 30 20 2d 20 32 30 31 36 2d 31 30 2d 30 34 0d 0a 2a 20 68 74 74 70 73 3a 2f 2f 77 6f 77 6a 73 2e 75 6b 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 6f 6d 61 73 20 47 72 61 69 6e 67 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 6d 6f 64 75 6c 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 62 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 29 62 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 3b 65 6c 73 Data Ascii: /! WOW wow.js - v1.3.0 - 2016-10-04 https://wowjs.uk* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,exports);els
2024-10-30 02:47:29 UTC	90	IN	Data Raw: 2e 63 6f 6e 66 69 67 2e 6d 6f 62 69 6c 65 26 26 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 7d 5d 29 2c 61 7d 28 29 3b 62 5b 22 64 65 66 61 75 6c 74 22 5d 3d 72 2c 61 2e 65 78 70 6f 72 74 73 3d 62 5b 22 64 65 66 61 75 6c 74 22 5d 7d 29 3b 0d 0a Data Ascii: .config.mobile&&f(navigator.userAgent)}}]),a}();b["default"]=r,a.exports=b["default"]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49720	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:29 UTC	690	OUT	GET /js/common.js?v=700f9591d6d25a13f73a115a64b7a34ee9feac0930587d78fa1080bd6562ef34245aac4c416539f236a81806e907f71efd552f733ab661065f0a5c44c411eb68 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:30 UTC	876	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:29 GMT Content-Type: application/javascript Content-Length: 31275 Connection: close Server: nginx Last-Modified: Mon, 16 Oct 2023 12:46:28 GMT Vary: Accept-Encoding ETag: "652d30a4-7a2b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:30 UTC	15508	IN	Data Raw: 76 61 72 20 73 63 72 65 65 6e 57 69 64 74 68 20 3d 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 7c 7c 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 20 7c 7c 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 0d 0a 20 20 20 20 73 63 72 65 65 6e 53 63 72 6f 6c 6c 54 6f 70 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 0d 0a 20 20 20 20 6c 69 67 68 74 42 6f 78 43 61 6e 43 68 61 6e 67 65 20 3d 20 74 72 75 65 3b 0d 0a 0d 0a 76 61 72 20 77 69 6e 64 6f 77 48 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 0d 0a 76 61 72 20 69 73 53 68 61 6e 67 48 61 69 20 Data Ascii: var screenWidth = window.innerWidth \|\| document.documentElement.clientWidth \|\| document.body.clientWidth, screenScrollTop = $(window).scrollTop(), lightBoxCanChange = true;var windowHref = window.location.hrefvar isShangHai
2024-10-30 02:47:30 UTC	15767	IN	Data Raw: 65 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 0d 0a 20 20 20 20 29 2c 0d 0a 20 20 20 20 20 20 20 20 74 6f 74 61 6c 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 3b 0d 0a 0d 0a 20 20 20 20 24 28 22 23 68 65 61 64 65 72 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 22 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 74 61 6c 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 20 3d 20 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 6f 74 61 6c 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 48 54 4d 4c 20 3d 20 22 22 3b Data Ascii: e").innerHTML ), totalBookingRooms; $("#headerBookingRooms").change(function (e) { e.preventDefault(); totalBookingRooms = $(this).val(); console.log(totalBookingRooms); var bookingRoomsHTML = "";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49721	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:29 UTC	698	OUT	GET /js/handlebars.min.js?v=393c8f9fe4ab64db6b154b322a4d9d02af8a8824ca36e0356d867f16fd817aeb7333c0a7eaea55ccbe8cd43ca5e01f0e4f9ff84507f737b6489e4498d284bf77 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:30 UTC	877	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:29 GMT Content-Type: application/javascript Content-Length: 80285 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-1399d" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:30 UTC	15507	IN	Data Raw: 2f 2a 2a 21 0d 0a 0d 0a 20 40 6c 69 63 65 6e 73 65 0d 0a 20 68 61 6e 64 6c 65 62 61 72 73 20 76 34 2e 37 2e 36 0d 0a 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 31 2d 32 30 31 39 20 62 79 20 59 65 68 75 64 61 20 4b 61 74 7a 0d 0a 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0d 0a 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0d 0a 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 Data Ascii: /**! @license handlebars v4.7.6Copyright (C) 2011-2019 by Yehuda KatzPermission is hereby granted, free of charge, to any person obtaining a copyof this software and associated documentation files (the "Software"), to dealin the Software
2024-10-30 02:47:30 UTC	1509	IN	Data Raw: 5b 63 5d 2c 65 3d 76 2e 52 45 56 49 53 49 4f 4e 5f 43 48 41 4e 47 45 53 5b 62 5d 3b 74 68 72 6f 77 20 6e 65 77 20 75 5b 22 64 65 66 61 75 6c 74 22 5d 28 22 54 65 6d 70 6c 61 74 65 20 77 61 73 20 70 72 65 63 6f 6d 70 69 6c 65 64 20 77 69 74 68 20 61 6e 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 48 61 6e 64 6c 65 62 61 72 73 20 74 68 61 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6e 74 69 6d 65 2e 20 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 65 63 6f 6d 70 69 6c 65 72 20 74 6f 20 61 20 6e 65 77 65 72 20 76 65 72 73 69 6f 6e 20 28 22 2b 64 2b 22 29 20 6f 72 20 64 6f 77 6e 67 72 61 64 65 20 79 6f 75 72 20 72 75 6e 74 69 6d 65 20 74 6f 20 61 6e 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 20 28 22 2b 65 2b 22 29 2e 22 29 7d 74 Data Ascii: [c],e=v.REVISION_CHANGES[b];throw new u["default"]("Template was precompiled with an older version of Handlebars than the current runtime. Please update your precompiler to a newer version ("+d+") or downgrade your runtime to an older version ("+e+").")}t
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 20 61 29 3b 61 2e 6d 61 69 6e 2e 64 65 63 6f 72 61 74 6f 72 3d 61 2e 6d 61 69 6e 5f 64 2c 62 2e 56 4d 2e 63 68 65 63 6b 52 65 76 69 73 69 6f 6e 28 61 2e 63 6f 6d 70 69 6c 65 72 29 3b 76 61 72 20 65 3d 61 2e 63 6f 6d 70 69 6c 65 72 26 26 37 3d 3d 3d 61 2e 63 6f 6d 70 69 6c 65 72 5b 30 5d 2c 67 3d 7b 73 74 72 69 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 28 61 26 26 62 20 69 6e 20 61 29 29 74 68 72 6f 77 20 6e 65 77 20 75 5b 22 64 65 66 61 75 6c 74 22 5d 28 27 22 27 2b 62 2b 27 22 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 69 6e 20 27 2b 61 2c 7b 6c 6f 63 3a 63 7d 29 3b 72 65 74 75 72 6e 20 61 5b 62 5d 7d 2c 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 72 65 74 Data Ascii: a);a.main.decorator=a.main_d,b.VM.checkRevision(a.compiler);var e=a.compiler&&7===a.compiler[0],g={strict:function(a,b,c){if(!(a&&b in a))throw new u["default"]('"'+b+'" not defined in '+a,{loc:c});return a[b]},lookupProperty:function(a,b){var c=a[b];ret
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 33 3a 5b 32 2c 35 38 5d 2c 38 34 3a 5b 32 2c 35 38 5d 2c 38 35 3a 5b 32 2c 35 38 5d 7d 2c 7b 33 33 3a 5b 32 2c 36 34 5d 2c 33 35 3a 36 38 2c 36 35 3a 5b 32 2c 36 34 5d 2c 37 32 3a 5b 32 2c 36 34 5d 2c 37 35 3a 5b 32 2c 36 34 5d 2c 38 30 3a 5b 32 2c 36 34 5d 2c 38 31 3a 5b 32 2c 36 34 5d 2c 38 32 3a 5b 32 2c 36 34 5d 2c 38 33 3a 5b 32 2c 36 34 5d 2c 38 34 3a 5b 32 2c 36 34 5d 2c 38 35 3a 5b 32 2c 36 34 5d 7d 2c 7b 32 31 3a 36 39 2c 32 33 3a 5b 32 2c 35 30 5d 2c 36 35 3a 5b 32 2c 35 30 5d 2c 37 32 3a 5b 32 2c 35 30 5d 2c 38 30 3a 5b 32 2c 35 30 5d 2c 38 31 3a 5b 32 2c 35 30 5d 2c 38 32 3a 5b 32 2c 35 30 5d 2c 38 33 3a 5b 32 2c 35 30 5d 2c 38 34 3a 5b 32 2c 35 30 5d 2c 38 35 3a 5b 32 2c 35 30 5d 7d 2c 7b 33 33 3a 5b 32 2c 39 30 5d 2c 36 31 3a 37 30 2c 36 35 Data Ascii: 3:[2,58],84:[2,58],85:[2,58]},{33:[2,64],35:68,65:[2,64],72:[2,64],75:[2,64],80:[2,64],81:[2,64],82:[2,64],83:[2,64],84:[2,64],85:[2,64]},{21:69,23:[2,50],65:[2,50],72:[2,50],80:[2,50],81:[2,50],82:[2,50],83:[2,50],84:[2,50],85:[2,50]},{33:[2,90],61:70,65
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 67 6e 6f 72 65 53 74 61 6e 64 61 6c 6f 6e 65 2c 63 3d 21 74 68 69 73 2e 69 73 52 6f 6f 74 53 65 65 6e 3b 74 68 69 73 2e 69 73 52 6f 6f 74 53 65 65 6e 3d 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 2e 62 6f 64 79 2c 69 3d 30 2c 6a 3d 64 2e 6c 65 6e 67 74 68 3b 69 3c 6a 3b 69 2b 2b 29 7b 76 61 72 20 6b 3d 64 5b 69 5d 2c 6c 3d 74 68 69 73 2e 61 63 63 65 70 74 28 6b 29 3b 69 66 28 6c 29 7b 76 61 72 20 6d 3d 65 28 64 2c 69 2c 63 29 2c 6e 3d 66 28 64 2c 69 2c 63 29 2c 6f 3d 6c 2e 6f 70 65 6e 53 74 61 6e 64 61 6c 6f 6e 65 26 26 6d 2c 70 3d 6c 2e 63 6c 6f 73 65 53 74 61 6e 64 61 6c 6f 6e 65 26 26 6e 2c 71 3d 6c 2e 69 6e 6c 69 6e 65 53 74 61 6e 64 61 6c 6f 6e 65 26 26 6d 26 26 6e 3b 6c 2e 63 6c 6f 73 65 26 26 67 28 64 2c 69 2c 21 Data Ascii: is.options.ignoreStandalone,c=!this.isRootSeen;this.isRootSeen=!0;for(var d=a.body,i=0,j=d.length;i<j;i++){var k=d[i],l=this.accept(k);if(l){var m=e(d,i,c),n=f(d,i,c),o=l.openStandalone&&m,p=l.closeStandalone&&n,q=l.inlineStandalone&&m&&n;l.close&&g(d,i,!
2024-10-30 02:47:30 UTC	14117	IN	Data Raw: 2e 6f 62 6a 65 63 74 4c 69 74 65 72 61 6c 28 6c 29 2c 62 2e 73 72 63 4e 61 6d 65 3f 28 6c 3d 6c 2e 74 6f 53 74 72 69 6e 67 57 69 74 68 53 6f 75 72 63 65 4d 61 70 28 7b 66 69 6c 65 3a 62 2e 64 65 73 74 4e 61 6d 65 7d 29 2c 6c 2e 6d 61 70 3d 6c 2e 6d 61 70 26 26 6c 2e 6d 61 70 2e 74 6f 53 74 72 69 6e 67 28 29 29 3a 6c 3d 6c 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 6c 7d 2c 70 72 65 61 6d 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 61 73 74 43 6f 6e 74 65 78 74 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 6e 65 77 20 6e 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 72 63 4e 61 6d 65 29 2c 74 68 69 73 2e 64 65 63 6f 72 61 74 6f 72 73 3d 6e 65 77 20 6e 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 68 69 73 2e 6f 70 74 Data Ascii: .objectLiteral(l),b.srcName?(l=l.toStringWithSourceMap({file:b.destName}),l.map=l.map&&l.map.toString()):l=l.toString()),l},preamble:function(){this.lastContext=0,this.source=new n["default"](this.options.srcName),this.decorators=new n["default"](this.opt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49722	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:29 UTC	697	OUT	GET /js/jquery-ui.min.js?v=599c75ac88aa53fcb8e8dfe27171ea2eba050829efcd7cf248866311a7839cb9153b3fb83c48a8d003276742257e159601dacedae0845f63cf23b64b6d82167a HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:30 UTC	878	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:29 GMT Content-Type: application/javascript Content-Length: 251656 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-3d708" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:30 UTC	15506	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 75 69 3d 74 2e 75 69 7c 7c 7b 7d 3b 74 2e 75 69 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 31 32 2e 31 22 3b 76 61 72 20 65 2c 69 3d 30 2c 73 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 3b 74 2e 63 6c 65 61 6e 44 61 74 61 3d 28 65 3d 74 2e 63 6c 65 61 6e 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 73 2c 6e 2c 6f 3b 66 6f 72 28 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 6e 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 74 72 79 7b 28 73 3d 74 2e 5f 64 61 74 61 Data Ascii: !function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){t.ui=t.ui\|\|{};t.ui.version="1.12.1";var e,i=0,s=Array.prototype.slice;t.cleanData=(e=t.cleanData,function(i){var s,n,o;for(o=0;null!=(n=i[o]);o++)try{(s=t._data
2024-10-30 02:47:30 UTC	10458	IN	Data Raw: 74 2e 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 22 29 7d 7d 7d 3b 22 31 2e 37 22 3d 3d 3d 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 33 29 26 26 28 74 2e 65 61 63 68 28 5b 22 57 69 64 74 68 22 2c 22 48 65 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 73 3d 22 57 69 64 74 68 22 3d 3d 3d 69 3f 5b 22 4c 65 66 74 22 2c 22 52 69 67 68 74 22 5d 3a 5b 22 54 6f 70 22 2c 22 42 6f 74 74 6f 6d 22 5d 2c 6e 3d 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6f 3d 7b 69 6e 6e 65 72 57 69 64 74 68 3a 74 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 6f 75 74 65 72 57 69 64 74 68 3a 74 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 6f Data Ascii: t.ui-form-reset")}}};"1.7"===t.fn.jquery.substring(0,3)&&(t.each(["Width","Height"],function(e,i){var s="Width"===i?["Left","Right"]:["Top","Bottom"],n=i.toLowerCase(),o={innerWidth:t.fn.innerWidth,innerHeight:t.fn.innerHeight,outerWidth:t.fn.outerWidth,o
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 67 61 62 6c 65 2d 68 61 6e 64 6c 65 22 29 7d 2c 5f 63 72 65 61 74 65 48 65 6c 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 73 3d 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 2e 68 65 6c 70 65 72 29 2c 6e 3d 73 3f 74 28 69 2e 68 65 6c 70 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 5b 65 5d 29 29 3a 22 63 6c 6f 6e 65 22 3d 3d 3d 69 2e 68 65 6c 70 65 72 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 63 6c 6f 6e 65 28 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 69 64 22 29 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 6e 2e 70 61 72 65 6e 74 73 28 22 62 6f 64 79 22 29 2e 6c 65 6e 67 74 68 7c 7c 6e 2e 61 70 70 65 6e 64 54 6f 28 22 70 61 72 65 6e 74 22 3d 3d 3d 69 Data Ascii: gable-handle")},_createHelper:function(e){var i=this.options,s=t.isFunction(i.helper),n=s?t(i.helper.apply(this.element[0],[e])):"clone"===i.helper?this.element.clone().removeAttr("id"):this.element;return n.parents("body").length\|\|n.appendTo("parent"===i
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 61 3d 28 65 2e 70 6f 73 69 74 69 6f 6e 41 62 73 7c 7c 65 2e 70 6f 73 69 74 69 6f 6e 2e 61 62 73 6f 6c 75 74 65 29 2e 74 6f 70 2b 65 2e 6d 61 72 67 69 6e 73 2e 74 6f 70 2c 72 3d 6f 2b 65 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2c 68 3d 61 2b 65 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 2c 6c 3d 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 63 3d 69 2e 6f 66 66 73 65 74 2e 74 6f 70 2c 75 3d 6c 2b 69 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 29 2e 77 69 64 74 68 2c 64 3d 63 2b 69 2e 70 72 6f 70 6f 72 74 69 6f 6e 73 28 29 2e 68 65 69 67 68 74 3b 73 77 69 74 63 68 28 73 29 7b 63 61 73 65 22 66 69 74 22 3a 72 65 74 75 72 6e 20 6c 3c 3d 6f 26 26 72 3c 3d 75 26 26 63 3c 3d 61 26 26 68 3c 3d 64 3b 63 61 73 Data Ascii: a=(e.positionAbs\|\|e.position.absolute).top+e.margins.top,r=o+e.helperProportions.width,h=a+e.helperProportions.height,l=i.offset.left,c=i.offset.top,u=l+i.proportions().width,d=c+i.proportions().height;switch(s){case"fit":return l<=o&&r<=u&&c<=a&&h<=d;cas
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 74 28 30 29 3a 75 3b 64 26 26 28 68 2e 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3d 74 28 64 29 2c 2f 64 6f 63 75 6d 65 6e 74 2f 2e 74 65 73 74 28 75 29 7c 7c 75 3d 3d 3d 64 6f 63 75 6d 65 6e 74 3f 28 68 2e 63 6f 6e 74 61 69 6e 65 72 4f 66 66 73 65 74 3d 7b 6c 65 66 74 3a 30 2c 74 6f 70 3a 30 7d 2c 68 2e 63 6f 6e 74 61 69 6e 65 72 50 6f 73 69 74 69 6f 6e 3d 7b 6c 65 66 74 3a 30 2c 74 6f 70 3a 30 7d 2c 68 2e 70 61 72 65 6e 74 44 61 74 61 3d 7b 65 6c 65 6d 65 6e 74 3a 74 28 64 6f 63 75 6d 65 6e 74 29 2c 6c 65 66 74 3a 30 2c 74 6f 70 3a 30 2c 77 69 64 74 68 3a 74 28 64 6f 63 75 6d 65 6e 74 29 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 28 64 6f 63 75 6d 65 6e 74 29 2e 68 65 69 67 68 74 28 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 70 61 Data Ascii: t(0):u;d&&(h.containerElement=t(d),/document/.test(u)\|\|u===document?(h.containerOffset={left:0,top:0},h.containerPosition={left:0,top:0},h.parentData={element:t(document),left:0,top:0,width:t(document).width(),height:t(document).height()\|\|document.body.pa
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 65 6c 70 65 72 3f 28 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 63 73 73 28 74 68 69 73 2e 5f 73 74 6f 72 65 64 43 53 53 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2c 22 75 69 2d 73 6f 72 74 61 62 6c 65 2d 68 65 6c 70 65 72 22 29 29 3a 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 73 68 6f 77 28 29 3b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 65 2d 2d 29 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 65 5d 2e 5f 74 72 69 67 67 65 72 28 22 64 65 61 63 74 69 76 61 74 65 22 2c 6e 75 6c 6c 2c 74 68 69 73 2e 5f 75 69 48 61 73 68 28 74 68 69 73 29 29 2c 74 Data Ascii: ===this.options.helper?(this.currentItem.css(this._storedCSS),this._removeClass(this.currentItem,"ui-sortable-helper")):this.currentItem.show();for(var e=this.containers.length-1;e>=0;e--)this.containers[e]._trigger("deactivate",null,this._uiHash(this)),t
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 7c 7c 73 2e 70 75 73 68 28 6e 28 22 64 65 61 63 74 69 76 61 74 65 22 2c 74 68 69 73 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 29 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 2e 63 6f 6e 74 61 69 6e 65 72 43 61 63 68 65 2e 6f 76 65 72 26 26 28 73 2e 70 75 73 68 28 6e 28 22 6f 75 74 22 2c 74 68 69 73 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 29 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 2e 63 6f 6e 74 61 69 6e 65 72 43 61 63 68 65 2e 6f 76 65 72 3d 30 29 3b 69 66 28 74 68 69 73 2e 73 74 6f 72 65 64 43 75 72 73 6f 72 26 26 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 66 69 6e 64 28 22 62 6f 64 79 22 29 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 74 68 69 73 2e 73 74 6f 72 65 64 43 75 72 73 6f 72 29 Data Ascii: \|\|s.push(n("deactivate",this,this.containers[i])),this.containers[i].containerCache.over&&(s.push(n("out",this,this.containers[i])),this.containers[i].containerCache.over=0);if(this.storedCursor&&(this.document.find("body").css("cursor",this.storedCursor)
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 61 63 74 69 76 65 2e 70 61 72 65 6e 74 28 29 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 2e 66 69 6e 64 28 22 2e 75 69 2d 6d 65 6e 75 22 29 2e 68 69 64 65 28 29 2e 61 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 7d 2c 5f 63 6c 6f 73 65 4f 6e 44 6f 63 75 6d 65 6e 74 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 74 28 65 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 6d 65 6e 75 22 29 2e 6c 65 6e 67 74 68 7d 2c 5f 69 73 44 69 76 69 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 2f 5b 5e 5c 2d 5c 75 32 30 31 34 5c 75 32 30 31 Data Ascii: s.active?this.active.parent():this.element),t.find(".ui-menu").hide().attr("aria-hidden","true").attr("aria-expanded","false")},_closeOnDocumentClick:function(e){return!t(e.target).closest(".ui-menu").length},_isDivider:function(t){return!/[^\-\u2014\u201
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 68 69 73 2e 74 79 70 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 74 79 70 65 2c 22 69 6e 70 75 74 22 3d 3d 3d 65 26 26 2f 72 61 64 69 6f 7c 63 68 65 63 6b 62 6f 78 2f 2e 74 65 73 74 28 74 68 69 73 2e 74 79 70 65 29 7c 7c 74 2e 65 72 72 6f 72 28 22 43 61 6e 27 74 20 63 72 65 61 74 65 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 20 6f 6e 20 65 6c 65 6d 65 6e 74 2e 6e 6f 64 65 4e 61 6d 65 3d 22 2b 65 2b 22 20 61 6e 64 20 65 6c 65 6d 65 6e 74 2e 74 79 70 65 3d 22 2b 74 68 69 73 2e 74 79 70 65 29 7d 2c 5f 65 6e 68 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 75 70 64 61 74 65 49 63 6f 6e 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 63 68 65 63 6b 65 64 29 7d 2c 77 69 64 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: his.type=this.element[0].type,"input"===e&&/radio\|checkbox/.test(this.type)\|\|t.error("Can't create checkboxradio on element.nodeName="+e+" and element.type="+this.type)},_enhance:function(){this._updateIcon(this.element[0].checked)},widget:function(){retu
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 65 74 75 72 6e 21 31 7d 2c 5f 67 65 74 49 6e 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 64 61 74 61 28 65 2c 22 64 61 74 65 70 69 63 6b 65 72 22 29 7d 63 61 74 63 68 28 74 29 7b 74 68 72 6f 77 22 4d 69 73 73 69 6e 67 20 69 6e 73 74 61 6e 63 65 20 64 61 74 61 20 66 6f 72 20 74 68 69 73 20 64 61 74 65 70 69 63 6b 65 72 22 7d 7d 2c 5f 6f 70 74 69 6f 6e 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 76 61 72 20 6e 2c 6f 2c 61 2c 72 2c 68 3d 74 68 69 73 2e 5f 67 65 74 49 6e 73 74 28 65 29 3b 69 66 28 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 22 64 65 66 61 75 6c 74 73 22 3d 3d 3d 69 3f 74 Data Ascii: eturn!1},_getInst:function(e){try{return t.data(e,"datepicker")}catch(t){throw"Missing instance data for this datepicker"}},_optionDatepicker:function(e,i,s){var n,o,a,r,h=this._getInst(e);if(2===arguments.length&&"string"==typeof i)return"defaults"===i?t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49725	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:29 UTC	694	OUT	GET /js/moment.min.js?v=a935d120cc992056fc89071f8d75823bcf8ce536dcdfc422e56cdd3ce6191c8959a730471b72f76f2f3804104e8911a211beca2ad00e02ce6a61d52266240d35 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:30 UTC	876	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:30 GMT Content-Type: application/javascript Content-Length: 58862 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-e5ee" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:30 UTC	15508	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 6d 6f 6d 65 6e 74 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.moment=t()}(this,function(){"use strict";var e,i;function f(){return e.apply(null,arguments)}function o(e){return e in
2024-10-30 02:47:30 UTC	16379	IN	Data Raw: 2c 6c 74 28 65 29 2c 69 74 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 29 7b 76 61 72 20 74 3b 69 66 28 65 26 26 65 2e 5f 6c 6f 63 61 6c 65 26 26 65 2e 5f 6c 6f 63 61 6c 65 2e 5f 61 62 62 72 26 26 28 65 3d 65 2e 5f 6c 6f 63 61 6c 65 2e 5f 61 62 62 72 29 2c 21 65 29 72 65 74 75 72 6e 20 6e 74 3b 69 66 28 21 6f 28 65 29 29 7b 69 66 28 74 3d 75 74 28 65 29 29 72 65 74 75 72 6e 20 74 3b 65 3d 5b 65 5d 7d 72 65 74 75 72 6e 20 6f 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 5f 61 3b 72 65 74 75 72 6e 20 6e 26 26 2d 32 3d 3d 3d 79 28 65 29 2e 6f 76 65 72 66 6c 6f 77 26 26 28 74 3d 6e 5b 76 65 5d 3c 30 7c 7c 31 31 3c 6e 5b 76 65 5d 3f 76 65 3a 6e 5b 6b 65 5d 3c 31 7c 7c 6e 5b 6b 65 5d 3e 78 65 28 6e 5b 70 65 5d Data Ascii: ,lt(e),it[e]}function dt(e){var t;if(e&&e._locale&&e._locale._abbr&&(e=e._locale._abbr),!e)return nt;if(!o(e)){if(t=ut(e))return t;e=[e]}return ot(e)}function ct(e){var t,n=e._a;return n&&-2===y(e).overflow&&(t=n[ve]<0\|\|11<n[ve]?ve:n[ke]<1\|\|n[ke]>xe(n[pe]
2024-10-30 02:47:30 UTC	16384	IN	Data Raw: 53 22 29 63 65 28 5f 6e 2c 6f 65 29 3b 66 75 6e 63 74 69 6f 6e 20 77 6e 28 65 2c 74 29 7b 74 5b 59 65 5d 3d 5a 28 31 65 33 2a 28 22 30 2e 22 2b 65 29 29 7d 66 6f 72 28 5f 6e 3d 22 53 22 3b 5f 6e 2e 6c 65 6e 67 74 68 3c 3d 39 3b 5f 6e 2b 3d 22 53 22 29 79 65 28 5f 6e 2c 77 6e 29 3b 79 6e 3d 7a 28 22 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 2c 21 31 29 2c 43 28 22 7a 22 2c 30 2c 30 2c 22 7a 6f 6e 65 41 62 62 72 22 29 2c 43 28 22 7a 7a 22 2c 30 2c 30 2c 22 7a 6f 6e 65 4e 61 6d 65 22 29 3b 76 61 72 20 70 6e 3d 6b 2e 70 72 6f 74 6f 74 79 70 65 3b 66 75 6e 63 74 69 6f 6e 20 76 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 70 6e 2e 61 64 64 3d 4a 74 2c 70 6e 2e 63 61 6c 65 6e 64 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: S")ce(_n,oe);function wn(e,t){t[Ye]=Z(1e3*("0."+e))}for(_n="S";_n.length<=9;_n+="S")ye(_n,wn);yn=z("Milliseconds",!1),C("z",0,0,"zoneAbbr"),C("zz",0,0,"zoneName");var pn=k.prototype;function vn(e){return e}pn.add=Jt,pn.calendar=function(e,t){1===arguments
2024-10-30 02:47:30 UTC	10591	IN	Data Raw: 68 73 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 52 65 67 65 78 29 7d 2c 6b 6e 2e 6d 6f 6e 74 68 73 53 68 6f 72 74 52 65 67 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 50 61 72 73 65 45 78 61 63 74 3f 28 6d 28 74 68 69 73 2c 22 5f 6d 6f 6e 74 68 73 52 65 67 65 78 22 29 7c 7c 48 65 2e 63 61 6c 6c 28 74 68 69 73 29 2c 65 3f 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 53 74 72 69 63 74 52 65 67 65 78 3a 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 52 65 67 65 78 29 3a 28 6d 28 74 68 69 73 2c 22 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 52 65 67 65 78 22 29 7c 7c 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 53 68 6f 72 74 52 65 67 65 78 3d 52 65 29 2c 74 68 69 73 2e 5f 6d Data Ascii: hsStrictRegex:this._monthsRegex)},kn.monthsShortRegex=function(e){return this._monthsParseExact?(m(this,"_monthsRegex")\|\|He.call(this),e?this._monthsShortStrictRegex:this._monthsShortRegex):(m(this,"_monthsShortRegex")\|\|(this._monthsShortRegex=Re),this._m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:29 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 02:47:30 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=36489 Date: Wed, 30 Oct 2024 02:47:30 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 02:47:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49726	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:30 UTC	559	OUT	GET /js/s_code.js HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:30 UTC	876	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:30 GMT Content-Type: application/javascript Content-Length: 40671 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-9edf" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:30 UTC	15508	IN	Data Raw: 2f 2a 20 53 69 74 65 43 61 74 61 6c 79 73 74 20 63 6f 64 65 20 76 65 72 73 69 6f 6e 3a 20 48 2e 32 31 2e 0d 0a 43 6f 70 79 72 69 67 68 74 20 31 39 39 36 2d 32 30 31 30 20 41 64 6f 62 65 2c 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 4d 6f 72 65 20 69 6e 66 6f 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6d 6e 69 74 75 72 65 2e 63 6f 6d 20 2a 2f 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 73 74 72 69 6e 67 28 6b 65 79 2c 20 64 65 66 61 75 6c 74 5f 29 0d 0a 7b 0d 0a 20 20 69 66 20 28 64 65 66 61 75 6c 74 5f 3d 3d 6e 75 6c 6c 29 20 64 65 66 61 75 6c 74 5f 3d 22 22 3b 0d 0a 20 20 6b 65 79 20 3d 20 6b 65 79 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5d 2f 2c 22 5c 5c 5c 5b 22 Data Ascii: /* SiteCatalyst code version: H.21.Copyright 1996-2010 Adobe, Inc. All Rights ReservedMore info available at http://www.omniture.com */function getQuerystring(key, default_){ if (default_==null) default_=""; key = key.replace(/[\[]/,"\\\["
2024-10-30 02:47:30 UTC	16379	IN	Data Raw: 72 70 6c 61 7a 61 68 6f 74 65 6c 22 0d 0a 73 2e 64 63 3d 22 31 32 32 22 0d 0a 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 44 4f 20 4e 4f 54 20 41 4c 54 45 52 20 41 4e 59 54 48 49 4e 47 20 42 45 4c 4f 57 20 54 48 49 53 20 4c 49 4e 45 20 21 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 76 61 72 20 73 5f 63 6f 64 65 3d 27 27 2c 73 5f 6f 62 6a 65 63 74 49 44 3b 66 75 6e 63 74 69 6f 6e 20 73 5f 67 69 28 75 6e 2c 70 67 2c 73 73 29 7b 76 61 72 20 63 3d 22 73 2e 5f 63 3d 27 73 5f 63 27 3b 73 2e 77 64 3d 77 69 6e 64 6f 77 3b 69 66 28 21 73 2e 77 64 2e 73 5f 63 5f 69 6e 29 7b 73 2e 77 64 2e 73 5f 63 5f 69 6c 3d 6e 65 77 20 41 72 72 61 79 3b 73 2e 77 64 2e 73 5f 63 5f 69 6e 3d 30 3b 7d 73 2e 5f 69 6c 3d 73 2e 77 64 2e 73 5f 63 5f 69 6c 3b 73 2e 5f 69 Data Ascii: rplazahotel"s.dc="122"/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/var s_code='',s_objectID;function s_gi(un,pg,ss){var c="s._c='s_c';s.wd=window;if(!s.wd.s_c_in){s.wd.s_c_il=new Array;s.wd.s_c_in=0;}s._il=s.wd.s_c_il;s._i
2024-10-30 02:47:30 UTC	8784	IN	Data Raw: 27 2b 74 5d 3d 31 7d 7d 3b 73 2e 64 6c 74 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 27 76 61 72 20 73 3d 73 5f 63 5f 69 6c 5b 27 2b 73 2e 5f 69 6e 2b 27 5d 2c 64 3d 6e 65 77 20 44 61 74 65 2c 69 2c 76 6f 2c 66 3d 30 3b 69 66 28 73 2e 64 22 0d 0a 2b 22 6c 6c 29 66 6f 72 28 69 3d 30 3b 69 3c 73 2e 64 6c 6c 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 6f 3d 73 2e 64 6c 6c 5b 69 5d 3b 69 66 28 76 6f 29 7b 69 66 28 21 73 2e 6d 5f 6d 28 5c 22 64 5c 22 29 7c 7c 64 2e 67 65 74 54 69 6d 65 28 29 2d 76 6f 2e 5f 74 3e 3d 73 2e 6d 61 78 44 65 6c 61 79 29 7b 73 2e 64 6c 6c 5b 69 5d 3d 30 3b 73 2e 74 28 76 6f 29 7d 65 6c 73 65 20 66 3d 31 7d 7d 69 66 28 73 2e 64 6c 69 29 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 73 2e 64 6c 69 29 3b 73 2e 64 6c 69 3d 30 3b 69 66 28 66 29 7b Data Ascii: '+t]=1}};s.dlt=new Function('var s=s_c_il['+s._in+'],d=new Date,i,vo,f=0;if(s.d"+"ll)for(i=0;i<s.dll.length;i++){vo=s.dll[i];if(vo){if(!s.m_m(\"d\")\|\|d.getTime()-vo._t>=s.maxDelay){s.dll[i]=0;s.t(vo)}else f=1}}if(s.dli)clearTimeout(s.dli);s.dli=0;if(f){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49729	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:31 UTC	498	OUT	GET /js/jquery-3.5.1.min.js?v=5882735d9a0239c5c63c5c87b81618e3c8dc09d7d743c3444c535b9547b9b65defa509d7804552c581cb84b61dd1225e2add5dca6b120868ec201fa979504f4b HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:31 UTC	877	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:31 GMT Content-Type: application/javascript Content-Length: 89478 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-15d86" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:31 UTC	15507	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-10-30 02:47:31 UTC	16379	IN	Data Raw: 3d 3d 72 3f 69 26 26 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 2a 3d 22 3d 3d 3d 72 3f 69 26 26 2d 31 3c 74 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 24 3d 22 3d 3d 3d 72 3f 69 26 26 74 2e 73 6c 69 63 65 28 2d 69 2e 6c 65 6e 67 74 68 29 3d 3d 3d 69 3a 22 7e 3d 22 3d 3d 3d 72 3f 2d 31 3c 28 22 20 22 2b 74 2e 72 65 70 6c 61 63 65 28 42 2c 22 20 22 29 2b 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 69 29 3a 22 7c 3d 22 3d 3d 3d 72 26 26 28 74 3d 3d 3d 69 7c 7c 74 2e 73 6c 69 63 65 28 30 2c 69 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 69 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 65 2c 74 2c 67 2c 76 29 7b 76 61 72 20 79 3d 22 6e 74 68 22 21 3d 3d 68 2e 73 6c 69 63 65 28 30 2c 33 29 2c 6d 3d 22 6c 61 73 74 22 21 3d 3d 68 2e Data Ascii: ==r?i&&0===t.indexOf(i):"*="===r?i&&-1<t.indexOf(i):"$="===r?i&&t.slice(-i.length)===i:"~="===r?-1<(" "+t.replace(B," ")+" ").indexOf(i):"\|="===r&&(t===i\|\|t.slice(0,i.length+1)===i+"-"))}},CHILD:function(h,e,t,g,v){var y="nth"!==h.slice(0,3),m="last"!==h.
2024-10-30 02:47:31 UTC	16384	IN	Data Raw: 66 6e 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 46 2e 74 68 65 6e 28 65 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 29 2c 74 68 69 73 7d 2c 53 2e 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 21 30 3d 3d 3d 65 3f 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 3a 53 2e 69 73 52 65 61 64 79 29 7c 7c 28 53 2e 69 73 52 65 61 64 79 3d 21 30 29 21 3d 3d 65 26 26 30 3c 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 7c 7c 46 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 45 2c 5b 53 5d 29 7d 7d 29 2c 53 2e 72 65 61 64 79 2e 74 68 65 6e 3d 46 2e 74 68 65 6e 2c 22 63 Data Ascii: fn.ready=function(e){return F.then(e)["catch"](function(e){S.readyException(e)}),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)\|\|(S.isReady=!0)!==e&&0<--S.readyWait\|\|F.resolveWith(E,[S])}}),S.ready.then=F.then,"c
2024-10-30 02:47:31 UTC	16384	IN	Data Raw: 66 3b 63 2b 2b 29 75 3d 65 2c 63 21 3d 3d 70 26 26 28 75 3d 53 2e 63 6c 6f 6e 65 28 75 2c 21 30 2c 21 30 29 2c 73 26 26 53 2e 6d 65 72 67 65 28 61 2c 76 65 28 75 2c 22 73 63 72 69 70 74 22 29 29 29 2c 69 2e 63 61 6c 6c 28 6e 5b 63 5d 2c 75 2c 63 29 3b 69 66 28 73 29 66 6f 72 28 6c 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 53 2e 6d 61 70 28 61 2c 48 65 29 2c 63 3d 30 3b 63 3c 73 3b 63 2b 2b 29 75 3d 61 5b 63 5d 2c 68 65 2e 74 65 73 74 28 75 2e 74 79 70 65 7c 7c 22 22 29 26 26 21 59 2e 61 63 63 65 73 73 28 75 2c 22 67 6c 6f 62 61 6c 45 76 61 6c 22 29 26 26 53 2e 63 6f 6e 74 61 69 6e 73 28 6c 2c 75 29 26 26 28 75 2e 73 72 63 26 26 22 6d 6f 64 75 6c 65 22 21 3d 3d 28 75 2e 74 79 70 65 7c 7c 22 22 29 2e 74 6f 4c 6f Data Ascii: f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0),s&&S.merge(a,ve(u,"script"))),i.call(n[c],u,c);if(s)for(l=a[a.length-1].ownerDocument,S.map(a,He),c=0;c<s;c++)u=a[c],he.test(u.type\|\|"")&&!Y.access(u,"globalEval")&&S.contains(l,u)&&(u.src&&"module"!==(u.type\|\|"").toLo
2024-10-30 02:47:31 UTC	16384	IN	Data Raw: 74 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 28 65 3d 6e 5b 74 5d 29 28 29 7c 7c 6e 5b 74 5d 21 3d 3d 65 7c 7c 6e 2e 73 70 6c 69 63 65 28 74 2d 2d 2c 31 29 3b 6e 2e 6c 65 6e 67 74 68 7c 7c 53 2e 66 78 2e 73 74 6f 70 28 29 2c 74 74 3d 76 6f 69 64 20 30 7d 2c 53 2e 66 78 2e 74 69 6d 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 74 69 6d 65 72 73 2e 70 75 73 68 28 65 29 2c 53 2e 66 78 2e 73 74 61 72 74 28 29 7d 2c 53 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 53 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 7c 7c 28 6e 74 3d 21 30 2c 73 74 28 29 29 7d 2c 53 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 3d 6e 75 6c 6c 7d 2c 53 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 Data Ascii: tt=Date.now();t<n.length;t++)(e=n[t])()\|\|n[t]!==e\|\|n.splice(t--,1);n.length\|\|S.fx.stop(),tt=void 0},S.fx.timer=function(e){S.timers.push(e),S.fx.start()},S.fx.interval=13,S.fx.start=function(){nt\|\|(nt=!0,st())},S.fx.stop=function(){nt=null},S.fx.speeds={s
2024-10-30 02:47:31 UTC	8440	IN	Data Raw: 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 28 74 68 69 73 29 2c 74 3d 65 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 74 2e 6c 65 6e 67 74 68 3f 74 2e 77 72 61 70 41 6c 6c 28 6e 29 3a 65 2e 61 70 70 65 6e 64 28 6e 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6d 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 6e 3f 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3a 74 29 7d 29 7d 2c 75 6e 77 72 61 70 3a 66 75 6e 63 74 69 6f Data Ascii: this.each(function(e){S(this).wrapInner(n.call(this,e))}):this.each(function(){var e=S(this),t=e.contents();t.length?t.wrapAll(n):e.append(n)})},wrap:function(t){var n=m(t);return this.each(function(e){S(this).wrapAll(n?t.call(this,e):t)})},unwrap:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49728	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:31 UTC	495	OUT	GET /js/harbour-plaza.js?v=63c898e7a1c43e391f18724e7cd8b0e0d236bc5aa25cc5bc1fa509562a584e616a39cb1dbe896c7f8a69fafdd3a1bfb54934aec098a1640ad9c7e6fe50d1f4bf HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:31 UTC	878	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:31 GMT Content-Type: application/javascript Content-Length: 573427 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-8bff3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:31 UTC	15506	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0d 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0d 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0d 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0d 0a 20 2a 2f 0d 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0d 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 Data Ascii: /! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); //***/ (function(modules) { // webpackBootstrap/****/
2024-10-30 02:47:31 UTC	1509	IN	Data Raw: 65 62 66 6c 6f 77 2e 6c 6f 61 64 20 2d 20 41 64 64 20 61 20 77 69 6e 64 6f 77 20 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 74 68 61 74 20 77 69 6c 6c 20 72 75 6e 20 65 76 65 6e 20 69 66 20 6c 6f 61 64 20 65 76 65 6e 74 20 68 61 73 20 61 6c 72 65 61 64 79 20 68 61 70 70 65 6e 65 64 0d 0a 20 2a 20 40 70 61 72 61 6d 20 20 7b 66 75 6e 63 74 69 6f 6e 7d 20 68 61 6e 64 6c 65 72 0d 0a 20 2a 2f 0d 0a 0d 0a 0d 0a 76 61 72 20 64 65 66 65 72 4c 6f 61 64 3b 0d 0a 0d 0a 57 65 62 66 6c 6f 77 2e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 68 61 6e 64 6c 65 72 29 20 7b 0d 0a 20 20 64 65 66 65 72 4c 6f 61 64 2e 74 68 65 6e 28 68 61 6e 64 6c 65 72 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 69 6e 64 4c 6f 61 64 28 29 20 7b 0d 0a 20 20 2f 2f 20 52 65 6a Data Ascii: ebflow.load - Add a window load handler that will run even if load event has already happened * @param {function} handler */var deferLoad;Webflow.load = function (handler) { deferLoad.then(handler);};function bindLoad() { // Rej
2024-10-30 02:47:31 UTC	16384	IN	Data Raw: 61 74 63 68 65 73 50 72 6f 70 65 72 74 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 33 31 29 2c 0d 0a 20 20 20 20 69 64 65 6e 74 69 74 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 30 29 2c 0d 0a 20 20 20 20 69 73 41 72 72 61 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 31 29 2c 0d 0a 20 20 20 20 70 72 6f 70 65 72 74 79 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 34 30 29 3b 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 54 68 65 20 62 61 73 65 20 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 60 5f 2e 69 74 65 72 61 74 65 65 60 2e 0d 0a 20 2a 0d 0a 20 2a 20 40 70 72 69 76 61 74 65 0d 0a 20 2a 20 40 70 61 72 61 6d 20 7b 2a 7d 20 5b 76 61 6c 75 65 Data Ascii: atchesProperty = __webpack_require__(231), identity = __webpack_require__(60), isArray = __webpack_require__(1), property = __webpack_require__(240);/** * The base implementation of `_.iteratee`. * * @private * @param {*} [value
2024-10-30 02:47:31 UTC	16384	IN	Data Raw: 7d 0d 0a 0d 0a 2f 2f 20 2d 2d 20 23 23 23 23 20 73 65 74 49 6e 28 29 0d 0a 2f 2f 20 2d 2d 20 52 65 74 75 72 6e 73 20 61 20 6e 65 77 20 6f 62 6a 65 63 74 20 77 69 74 68 20 61 20 6d 6f 64 69 66 69 65 64 20 2a 2a 6e 65 73 74 65 64 2a 2a 20 61 74 74 72 69 62 75 74 65 2e 0d 0a 2f 2f 20 2d 2d 0d 0a 2f 2f 20 2d 2d 20 4e 6f 74 65 73 3a 0d 0a 2f 2f 20 2d 2d 0d 0a 2f 2f 20 2d 2d 20 2a 20 49 66 20 74 68 65 20 70 72 6f 76 69 64 65 64 20 76 61 6c 75 65 20 69 73 20 74 68 65 20 73 61 6d 65 20 61 73 20 28 2a 72 65 66 65 72 65 6e 74 69 61 6c 6c 79 20 65 71 75 61 6c 20 74 6f 2a 29 0d 0a 2f 2f 20 2d 2d 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 76 61 6c 75 65 2c 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 20 69 73 20 72 65 74 75 72 6e 65 64 2e 0d 0a 2f 2f 20 Data Ascii: }// -- #### setIn()// -- Returns a new object with a modified nested attribute.// --// -- Notes:// --// -- * If the provided value is the same as (referentially equal to)// -- the previous value, the original object is returned.//
2024-10-30 02:47:31 UTC	16384	IN	Data Raw: 79 20 74 6f 20 73 65 61 72 63 68 20 66 6f 72 2e 0d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 6e 75 6d 62 65 72 7d 20 52 65 74 75 72 6e 73 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 74 68 65 20 6d 61 74 63 68 65 64 20 76 61 6c 75 65 2c 20 65 6c 73 65 20 60 2d 31 60 2e 0d 0a 20 2a 2f 0d 0a 66 75 6e 63 74 69 6f 6e 20 61 73 73 6f 63 49 6e 64 65 78 4f 66 28 61 72 72 61 79 2c 20 6b 65 79 29 20 7b 0d 0a 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 0d 0a 20 20 77 68 69 6c 65 20 28 6c 65 6e 67 74 68 2d 2d 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 65 71 28 61 72 72 61 79 5b 6c 65 6e 67 74 68 5d 5b 30 5d 2c 20 6b 65 79 29 29 20 7b 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 7d Data Ascii: y to search for. * @returns {number} Returns the index of the matched value, else `-1`. */function assocIndexOf(array, key) { var length = array.length; while (length--) { if (eq(array[length][0], key)) { return length; } }
2024-10-30 02:47:31 UTC	16384	IN	Data Raw: 70 65 60 20 70 72 6f 70 65 72 74 79 20 77 68 69 63 68 20 6d 61 79 20 6e 6f 74 20 62 65 20 60 75 6e 64 65 66 69 6e 65 64 60 2e 20 49 74 20 69 73 20 61 20 67 6f 6f 64 20 69 64 65 61 20 74 6f 20 75 73 65 0d 0a 20 20 20 2a 20 73 74 72 69 6e 67 20 63 6f 6e 73 74 61 6e 74 73 20 66 6f 72 20 61 63 74 69 6f 6e 20 74 79 70 65 73 2e 0d 0a 20 20 20 2a 0d 0a 20 20 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 6a 65 63 74 7d 20 46 6f 72 20 63 6f 6e 76 65 6e 69 65 6e 63 65 2c 20 74 68 65 20 73 61 6d 65 20 61 63 74 69 6f 6e 20 6f 62 6a 65 63 74 20 79 6f 75 20 64 69 73 70 61 74 63 68 65 64 2e 0d 0a 20 20 20 2a 0d 0a 20 20 20 2a 20 4e 6f 74 65 20 74 68 61 74 2c 20 69 66 20 79 6f 75 20 75 73 65 20 61 20 63 75 73 74 6f 6d 20 6d 69 64 64 6c 65 77 61 72 65 2c 20 69 74 20 6d 61 Data Ascii: pe` property which may not be `undefined`. It is a good idea to use * string constants for action types. * * @returns {Object} For convenience, the same action object you dispatched. * * Note that, if you use a custom middleware, it ma
2024-10-30 02:47:32 UTC	16384	IN	Data Raw: 47 65 74 54 61 67 3b 0d 0a 0d 0a 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 66 6f 72 20 64 61 74 61 20 76 69 65 77 73 2c 20 6d 61 70 73 2c 20 73 65 74 73 2c 20 61 6e 64 20 77 65 61 6b 20 6d 61 70 73 20 69 6e 20 49 45 20 31 31 20 61 6e 64 20 70 72 6f 6d 69 73 65 73 20 69 6e 20 4e 6f 64 65 2e 6a 73 20 3c 20 36 2e 0d 0a 69 66 20 28 28 44 61 74 61 56 69 65 77 20 26 26 20 67 65 74 54 61 67 28 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 31 29 29 29 20 21 3d 20 64 61 74 61 56 69 65 77 54 61 67 29 20 7c 7c 0d 0a 20 20 20 20 28 4d 61 70 20 26 26 20 67 65 74 54 61 67 28 6e 65 77 20 4d 61 70 29 20 21 3d 20 6d 61 70 54 61 67 29 20 7c 7c 0d 0a 20 20 20 20 28 50 72 6f 6d 69 73 65 20 26 26 20 67 65 74 54 61 67 28 50 72 6f 6d 69 73 65 Data Ascii: GetTag;// Fallback for data views, maps, sets, and weak maps in IE 11 and promises in Node.js < 6.if ((DataView && getTag(new DataView(new ArrayBuffer(1))) != dataViewTag) \|\| (Map && getTag(new Map) != mapTag) \|\| (Promise && getTag(Promise
2024-10-30 02:47:32 UTC	16384	IN	Data Raw: 74 28 61 2c 20 31 30 29 20 3a 20 5f 2e 74 65 73 74 28 61 29 20 26 26 20 28 64 20 3d 20 31 65 33 20 2a 20 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 2c 20 30 20 3e 20 64 20 26 26 20 28 64 20 3d 20 30 29 2c 20 64 20 3d 3d 3d 20 64 20 3f 20 64 20 3a 20 63 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 20 7b 0d 0a 20 20 20 20 55 2e 64 65 62 75 67 20 26 26 20 77 69 6e 64 6f 77 20 26 26 20 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 61 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 20 7b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 62 20 3d 20 2d 31 2c 20 63 20 3d 20 61 20 3f 20 61 2e 6c 65 6e 67 74 68 20 3a 20 30 2c 20 64 20 3d 20 5b 5d 3b 20 2b 2b 62 20 3c 20 63 3b 29 20 7b 0d 0a 20 20 Data Ascii: t(a, 10) : _.test(a) && (d = 1e3 * parseFloat(a)), 0 > d && (d = 0), d === d ? d : c; } function j(a) { U.debug && window && window.console.warn(a); } function k(a) { for (var b = -1, c = a ? a.length : 0, d = []; ++b < c;) {
2024-10-30 02:47:32 UTC	16384	IN	Data Raw: 74 68 69 73 2e 67 65 74 28 29 29 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 74 68 69 73 2e 74 77 65 65 6e 3b 0d 0a 20 20 20 20 20 20 61 20 26 26 20 61 2e 63 6f 6e 74 65 78 74 20 26 26 20 61 2e 64 65 73 74 72 6f 79 28 29 3b 0d 0a 20 20 20 20 7d 2c 20 61 2e 63 6f 6e 76 65 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 61 2c 20 62 29 20 7b 0d 0a 20 20 20 20 20 20 69 66 20 28 22 61 75 74 6f 22 20 3d 3d 20 61 20 26 26 20 74 68 69 73 2e 61 75 74 6f 29 20 72 65 74 75 72 6e 20 61 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 63 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 65 20 3d 20 22 6e 75 6d 62 65 72 22 20 3d 3d 20 74 79 70 65 6f 66 20 61 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 66 20 3d 20 22 73 74 72 69 6e 67 22 20 3d 3d 20 74 79 70 65 6f 66 20 61 3b 0d 0a 0d 0a Data Ascii: this.get())); var a = this.tween; a && a.context && a.destroy(); }, a.convert = function (a, b) { if ("auto" == a && this.auto) return a; var c, e = "number" == typeof a, f = "string" == typeof a;
2024-10-30 02:47:32 UTC	16384	IN	Data Raw: 7c 7c 20 69 6e 64 65 78 20 69 6e 20 4f 29 20 26 26 20 4f 5b 69 6e 64 65 78 5d 20 3d 3d 3d 20 65 6c 29 20 72 65 74 75 72 6e 20 49 53 5f 49 4e 43 4c 55 44 45 53 20 7c 7c 20 69 6e 64 65 78 20 7c 7c 20 30 3b 0d 0a 20 20 20 20 7d 20 72 65 74 75 72 6e 20 21 49 53 5f 49 4e 43 4c 55 44 45 53 20 26 26 20 2d 31 3b 0d 0a 20 20 7d 3b 0d 0a 7d 3b 0d 0a 0d 0a 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 7b 0d 0a 20 20 2f 2f 20 60 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 60 20 6d 65 74 68 6f 64 0d 0a 20 20 2f 2f 20 68 74 74 70 73 3a 2f 2f 74 63 33 39 2e 67 69 74 68 75 62 2e 69 6f 2f 65 63 6d 61 32 36 32 2f 23 73 65 63 2d 61 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 0d 0a 20 20 69 6e 63 6c 75 64 65 73 3a 20 Data Ascii: \|\| index in O) && O[index] === el) return IS_INCLUDES \|\| index \|\| 0; } return !IS_INCLUDES && -1; };};module.exports = { // `Array.prototype.includes` method // https://tc39.github.io/ecma262/#sec-array.prototype.includes includes:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49730	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:31 UTC	489	OUT	GET /js/wow.min.js?v=7e966998cbb05b3e9e28b04dc5f79a54c99e2fc905386d6c00fac819afd60ef061c3f8a3853ff065b40ee77c16f9d1d01f7d6f673133dd491be8c48bbfec8e2e HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:31 UTC	875	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:31 GMT Content-Type: application/javascript Content-Length: 8159 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-1fdf" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:31 UTC	8069	IN	Data Raw: 2f 2a 21 20 57 4f 57 20 77 6f 77 2e 6a 73 20 2d 20 76 31 2e 33 2e 30 20 2d 20 32 30 31 36 2d 31 30 2d 30 34 0d 0a 2a 20 68 74 74 70 73 3a 2f 2f 77 6f 77 6a 73 2e 75 6b 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 6f 6d 61 73 20 47 72 61 69 6e 67 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 6d 6f 64 75 6c 65 22 2c 22 65 78 70 6f 72 74 73 22 5d 2c 62 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 29 62 28 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 3b 65 6c 73 Data Ascii: /! WOW wow.js - v1.3.0 - 2016-10-04 https://wowjs.uk* Copyright (c) 2016 Thomas Grainger; Licensed MIT */!function(a,b){if("function"==typeof define&&define.amd)define(["module","exports"],b);else if("undefined"!=typeof exports)b(module,exports);els
2024-10-30 02:47:31 UTC	90	IN	Data Raw: 2e 63 6f 6e 66 69 67 2e 6d 6f 62 69 6c 65 26 26 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 7d 5d 29 2c 61 7d 28 29 3b 62 5b 22 64 65 66 61 75 6c 74 22 5d 3d 72 2c 61 2e 65 78 70 6f 72 74 73 3d 62 5b 22 64 65 66 61 75 6c 74 22 5d 7d 29 3b 0d 0a Data Ascii: .config.mobile&&f(navigator.userAgent)}}]),a}();b["default"]=r,a.exports=b["default"]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49731	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:31 UTC	488	OUT	GET /js/common.js?v=700f9591d6d25a13f73a115a64b7a34ee9feac0930587d78fa1080bd6562ef34245aac4c416539f236a81806e907f71efd552f733ab661065f0a5c44c411eb68 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:31 UTC	876	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:31 GMT Content-Type: application/javascript Content-Length: 31275 Connection: close Server: nginx Last-Modified: Mon, 16 Oct 2023 12:46:28 GMT Vary: Accept-Encoding ETag: "652d30a4-7a2b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:31 UTC	15508	IN	Data Raw: 76 61 72 20 73 63 72 65 65 6e 57 69 64 74 68 20 3d 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 7c 7c 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 20 7c 7c 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 0d 0a 20 20 20 20 73 63 72 65 65 6e 53 63 72 6f 6c 6c 54 6f 70 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 0d 0a 20 20 20 20 6c 69 67 68 74 42 6f 78 43 61 6e 43 68 61 6e 67 65 20 3d 20 74 72 75 65 3b 0d 0a 0d 0a 76 61 72 20 77 69 6e 64 6f 77 48 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 0d 0a 76 61 72 20 69 73 53 68 61 6e 67 48 61 69 20 Data Ascii: var screenWidth = window.innerWidth \|\| document.documentElement.clientWidth \|\| document.body.clientWidth, screenScrollTop = $(window).scrollTop(), lightBoxCanChange = true;var windowHref = window.location.hrefvar isShangHai
2024-10-30 02:47:31 UTC	1509	IN	Data Raw: 65 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 0d 0a 20 20 20 20 29 2c 0d 0a 20 20 20 20 20 20 20 20 74 6f 74 61 6c 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 3b 0d 0a 0d 0a 20 20 20 20 24 28 22 23 68 65 61 64 65 72 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 22 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 74 61 6c 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 20 3d 20 24 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 6f 74 61 6c 42 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 6f 6f 6b 69 6e 67 52 6f 6f 6d 73 48 54 4d 4c 20 3d 20 22 22 3b Data Ascii: e").innerHTML ), totalBookingRooms; $("#headerBookingRooms").change(function (e) { e.preventDefault(); totalBookingRooms = $(this).val(); console.log(totalBookingRooms); var bookingRoomsHTML = "";
2024-10-30 02:47:31 UTC	14258	IN	Data Raw: 20 24 28 6f 41 63 63 29 2e 61 74 74 72 28 27 69 64 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 20 73 49 44 20 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 27 27 2c 20 27 27 2c 20 27 23 27 2b 73 49 44 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 69 66 28 20 28 27 27 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 29 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 3e 3d 20 30 20 29 7b 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 48 61 73 68 20 3d 20 28 27 27 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 29 2e 72 65 70 6c 61 63 65 28 2f 2e 2a 5b 23 5d 2f 67 69 2c 27 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 Data Ascii: $(oAcc).attr('id'); if( sID ){ window.history.pushState('', '', '#'+sID); } }); if( (''+window.location).indexOf('#') >= 0 ){ var sHash = (''+window.location).replace(/.*[#]/gi,''); var s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49732	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:31 UTC	675	OUT	GET /group/files/page/737/KLNH.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:31 GMT Content-Type: image/jpeg Content-Length: 40445 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-9dfd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 01 06 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 33 31 91 01 00 07 00 00 00 04 01 02 03 00 92 86 00 07 00 00 00 3b 00 00 00 c0 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 01 40 00 00 a0 03 00 03 00 00 00 01 00 f0 00 00 00 00 00 00 41 53 43 49 49 00 00 00 78 72 3a 64 3a 44 41 46 39 66 43 42 30 57 6c 49 3a 33 2c 6a 3a 33 36 31 35 Data Ascii: JFIF``ExifMM*V^(if``0231;0100@ASCIIxr:d:DAF9fCB0WlI:3,j:3615
2024-10-30 02:47:32 UTC	10458	IN	Data Raw: e1 e8 e3 70 f7 55 35 8a b6 ed 49 6b b7 9e e7 77 85 b8 8a f2 c4 e2 32 0a d4 d5 4a 35 25 19 5a 4a ea 32 a6 ec b7 d1 5d 5b 5e c8 fa 9f e1 a7 ed 03 a1 f8 6b c3 da 3e 9d e3 cb 48 6f 75 25 7b 49 d2 c4 37 9f 6d 69 34 76 6b 6a b0 4d b8 e5 a3 2d bc 1e bb 7c dc 91 5f 0a fc 73 f8 d9 e3 1f da 5b e2 cf 8d bc 4b ad 0d d7 12 5d c3 1c 70 5b cb e7 25 bd a3 89 c2 c7 10 c6 36 2c 71 46 a0 29 c1 0c 48 39 3c fa 1f ec f2 d2 7e d6 5e 1b f8 9b e2 c8 f5 a9 e3 6f 87 9a 54 5a dc 31 24 ad 10 b9 b9 6b 88 c2 02 e0 fe ec 30 12 02 57 9c b6 46 2b ac f0 6f c4 db 4f 1a 78 36 ea fb 45 d3 f4 bd 53 53 d4 ac 77 5f c5 1d b3 47 71 77 e6 3b 9f b4 da ee 3b 05 c7 0c 24 89 70 db 81 2a 19 9b 15 97 87 f8 1a b8 55 53 13 8c d1 49 da f6 db d7 b2 77 d0 bf a4 16 27 07 4b 13 43 29 c2 eb 24 a3 29 6b 64 f5 d1 Data Ascii: pU5Ikw2J5%ZJ2][^k>Hou%{I7mi4vkjM-\|_s[K]p[%6,qF)H9<~^oTZ1$k0WF+oOx6ESSw_Gqw;;$p*USIw'KC)$)kd
2024-10-30 02:47:32 UTC	14444	IN	Data Raw: c1 7b 69 64 93 cb 3f 21 c9 5c 87 0a c1 5b 66 57 72 a8 07 8f 92 ff 00 6c 8f 8e 1a 5f 86 3e 1a cd e2 eb 2f 06 6b 9a 5d d4 11 26 8d 77 af d8 dd 05 f3 a7 8a e9 e3 69 64 55 04 a7 9b 6c ea a1 fa fc 8a 33 93 b6 be a8 d6 fc 2f a5 7c 30 fd b4 3e 33 78 aa 18 dc ff 00 63 68 d1 5c ac 0a 0b 4c c0 d8 c4 55 7d 7f 79 34 f9 51 91 cd b3 1f 4a da fd 9d 3f 66 dd 26 d3 c5 3e 26 f0 27 8f 2d 74 19 6e 3e 24 43 17 88 3c 34 97 4e f2 40 20 92 1f de 5a b8 62 72 ca db 03 29 00 90 01 e4 30 6a d3 28 cc a4 b0 91 55 7e 1b fe 9f e7 a0 b3 6c 1c 23 8e 94 a8 2d 79 57 ce ff 00 e4 8f c9 1d 07 f6 bc d5 b5 ed 54 ea 96 7f 6c d2 d6 dd a2 8a cc 46 8c a9 12 85 0a 54 28 27 25 8f 27 f1 f6 af 42 ff 00 82 84 6b 9e 23 f1 75 86 85 e1 99 ae ae 35 38 6f ac 6d 35 2d 3d 5e ef fd 22 49 1a 38 a0 0f 26 78 fe 06 Data Ascii: {id?!\[fWrl_>/k]&widUl3/\|0>3xch\LU}y4QJ?f&>&'-tn>$C<4N@ Zbr)0j(U~l#-yWTlFT('%'Bk#u58om5-=^"I8&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49733	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:31 UTC	801	OUT	GET /images/heaeder_lang.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/css/harbour-plaza.css?v=ca0584777c36ab01fbd8b2ca9a8482995cae36ae64feca37d732da937fcea17d5dbdc09b6b68905c6ef3eb20ce7cb6c1dfb3a6b582802f6b2103624e668e04c1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	838	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:32 GMT Content-Type: image/png Content-Length: 1192 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:44 GMT ETag: "646f7fd8-4a8" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	1192	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 08 06 00 00 00 3b d6 95 4a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR;JtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49736	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:32 UTC	676	OUT	GET /group/files/page/737/KHFH9.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:32 GMT Content-Type: image/jpeg Content-Length: 17477 Connection: close Server: nginx Last-Modified: Tue, 03 Sep 2024 06:52:21 GMT ETag: "66d6b225-4445" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 56 00 00 00 00 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 33 31 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 03 00 01 00 00 00 40 01 00 00 03 a0 03 00 01 00 00 00 a8 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 ff e1 05 04 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 Data Ascii: JFIFExifII*(iV02310100@``http://ns.adobe.com/xap/1.0/<x:xmpmeta x
2024-10-30 02:47:32 UTC	1509	IN	Data Raw: bd af 1b 33 72 e7 5c 10 e8 5a 76 99 6e e3 7f da cc f3 1f ee a8 e8 07 d7 9a e9 8e b5 26 87 a6 47 72 f1 a5 c6 b1 7e be 6c 86 6e 76 46 4e 55 4e 3d 7a e2 bc f6 db ec 97 5a 85 b4 71 b3 16 4c 9b 82 54 0c 01 d8 1e fc 7e b5 a5 a8 6a 0d 7b 79 24 b2 f5 3c 01 d9 47 60 29 b6 c5 ca 8a fe 31 d5 ef 75 db 8b 6b ad 40 47 bd 54 a0 d8 a1 78 1c ff 00 53 5c f0 15 b5 75 24 53 c4 11 93 24 1c f0 70 45 50 16 82 43 8b 69 03 b7 f7 0f ca df 80 ef f8 66 8b 8d 59 68 55 ae 9f e1 e4 81 3c 4f 68 b9 ff 00 58 4c 64 0e d9 04 0f d7 15 80 d6 17 bf c3 6b 39 ff 00 80 1a d1 f0 ca 5d 5a eb 76 b3 35 b4 a8 22 91 58 bb 0c 28 c1 07 9c fd 28 1b d8 f7 48 b4 db 53 70 cd 79 6f e6 82 b8 ce 4e 47 d2 99 7f 6b 0c 10 ec d3 2d d9 4f 69 0b e1 bf fa df 97 e3 5b 9f 6d b1 9a da 19 63 9e 27 47 70 15 81 ce 72 33 8a Data Ascii: 3r\Zvn&Gr~lnvFNUN=zZqLT~j{y$<G`)1uk@GTxS\u$S$pEPCifYhU<OhXLdk9]Zv5"X((HSpyoNGk-Oi[mc'Gpr3
2024-10-30 02:47:32 UTC	425	IN	Data Raw: 5b 3b c3 63 9e df 2d 14 54 74 3a 2c 4a 96 b6 c7 ef 0b 80 7d b6 9f f0 a9 96 de c8 44 d2 01 72 76 ba a6 d2 a0 64 90 4f a9 e3 e5 3f a5 14 51 71 93 2f 92 84 08 ed 53 3e b2 31 7f e5 8a b5 0d e7 d9 65 b7 91 08 59 3c c5 18 50 14 63 3c f4 f6 f5 a2 8a 02 c7 73 78 43 48 8d bb 20 af d7 fa 71 52 d9 36 70 3a 51 45 57 53 9f a1 e7 9e 3f 24 78 a5 57 38 2d 1a 12 0f d4 d7 3f 7e 5a 09 d5 f2 68 a2 87 b9 ad 3d 8d a8 9f ce b7 46 5c 11 8a 64 05 59 1a 26 fc 01 fe 54 51 50 68 5c d2 1b 73 ac 59 3f c4 0f b7 15 d4 fc 28 88 1d 52 76 23 ee 47 80 7d 32 73 fd 28 a2 aa 1f 12 33 ab f0 b1 35 6b 93 2e a7 76 e4 9f 9a 56 3d 7d ea 86 0b 1e 28 a2 93 04 8d 0d 2e c6 c6 fe e1 6d 75 30 7c a7 53 b5 83 95 c1 eb d4 11 e8 69 35 0f 85 5a 3d c1 67 b2 bb b9 81 cf 23 32 6e 5f c8 f3 fa d1 45 6d 4d 26 8c 6a Data Ascii: [;c-Tt:,J}DrvdO?Qq/S>1eY<Pc<sxCH qR6p:QEWS?$xW8-?~Zh=F\dY&TQPh\sY?(Rv#G}2s(35k.vV=}(.mu0\|Si5Z=g#2n_EmM&j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49739	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:32 UTC	677	OUT	GET /group/files/page/737/HPNP05.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	842	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:32 GMT Content-Type: image/png Content-Length: 130424 Connection: close Server: nginx Last-Modified: Fri, 26 Apr 2024 03:56:47 GMT ETag: "662b25ff-1fd78" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	15542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 a8 08 06 00 00 00 91 f0 37 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 f2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 Data Ascii: PNGIHDR@7sRGBgAMAapHYs+iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:a
2024-10-30 02:47:32 UTC	1509	IN	Data Raw: a1 8b 03 48 bc 1c 8b c6 5a ec 4f 2a 71 0c 4f ea db e5 1c 56 78 58 35 e7 a0 41 13 03 e3 5a 80 2a 9f 16 e5 8b 09 df 19 cf af a6 65 c5 05 2e a1 48 a5 c0 1d f1 96 50 a9 2c 90 1b e7 c2 e6 f2 fd 0e dc 2d 21 dc d9 87 a8 b1 33 c4 75 25 6d db 81 f1 05 e0 39 06 c4 fe 42 4b 6a a1 ec ed 82 a8 55 a6 f0 b9 5d 37 cd 32 47 b0 7f 3f 0e df fa 2d 9a 3c 8c 45 b3 9b 4a 46 16 57 49 5a cf 0c 79 72 11 8f 2a f5 96 11 66 41 35 bc b6 0f 5a c8 c4 55 99 d3 0b c8 a7 8a c2 b6 88 30 81 f7 86 4a 33 53 62 00 55 70 53 70 a3 9e 40 e2 a4 01 29 d3 b4 83 77 07 90 a6 c3 51 de 6f e1 9e 6a f0 bc 9f de bc 25 52 81 9e e8 f2 4a 37 5e db c3 8b 1d f9 bd 14 fd 5d 81 2e d1 e4 19 5f ea fd 8d c1 13 da 06 fc 53 7f 1a 9f 7c 74 c6 46 60 c2 da 69 87 60 da 80 dc c4 b7 ff fc 21 8f ca 86 65 e7 73 4f 49 51 f9 07 Data Ascii: HZOqOVxX5AZe.HP,-!3u%m9BKjU]72G?-<EJFWIZyr*fA5ZU0J3SbUpSp@)wQoj%RJ7^]._S\|tF`i`!esOIQ
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: e6 79 c9 53 f8 a4 f0 4e e5 ef fe d4 5f 2b d2 95 4f a4 2d 44 41 3b 2b b8 d2 d8 ec e6 2b 7c 28 02 38 c9 e4 7a 03 85 80 b2 bd d7 f6 71 b5 7b 28 41 b4 9d 2e ae c2 e2 ab 62 99 47 c1 e1 7e 32 3f 9e da c6 f8 c5 e8 cd ef 13 76 c0 78 7d 67 b5 97 ef 3a 28 5c 2a 19 97 03 ba f7 f0 30 d6 d7 57 63 6d a5 15 ab bd f2 61 9d 9d c3 7e ce 80 b7 fc 77 c2 0b 99 53 21 c7 db 14 e1 6e da 5a 8a 61 03 3e 10 66 1f 60 0e d6 a8 b4 32 e4 6d 01 8b cb ee 37 f3 dd e2 9a 8b 40 a8 4c 51 1a 27 3c 5b c2 d2 cf c6 ae ed a6 b7 d4 05 b7 e3 70 95 e8 64 10 3c bb 2a 0c e7 9a 82 7e f7 c1 05 59 3b 9d 55 ea 27 9c 49 5c ea a9 14 d8 6c 8b 2c 9e ab 70 48 5c 98 46 64 4a a0 93 b9 4b b3 1f 45 bf 7f 18 0f 1e ee c6 ce ae 73 0d 9d fb 64 98 ae 00 92 9e f2 2c 43 3c 27 e1 ac 17 a6 cb c2 c1 96 f7 1c 44 69 23 0d 9d Data Ascii: ySN_+O-DA;++\|(8zq{(A.bG~2?vx}g:(\0Wcma~wS!nZa>f`2m7@LQ'<[pd<~Y;U'I\l,pH\FdJKEsd,C<'Di#
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 28 0f 38 f8 22 2d 5d ad c7 be 4b bf 03 61 db fc 54 a4 30 39 45 42 c1 36 93 7d 47 2b cb cb d9 06 f5 56 1e fd 79 e7 c8 9e 60 49 b7 53 28 bc 95 b4 38 f5 74 e1 23 e9 58 26 19 83 3f bc 20 e9 95 53 51 30 1e be e9 20 bf 2d 50 88 27 4b 7e 10 0b 2f 0a 6f 28 a7 ab 50 a2 9c a5 57 e6 c0 13 32 cb f5 42 dd 91 ca 62 36 3e c2 0b ea 43 ca 41 54 78 be 84 91 93 1a 8e a9 36 a1 67 af 8a 72 e4 a8 47 de f4 dd 57 10 2a 5d 66 86 ae 7d 64 00 82 19 0a 3a 9a 33 40 f9 b9 28 af 3d 5f 8e c8 0e 88 a0 a6 28 e2 99 3c ea 60 05 46 db c5 0d 0c 1f 33 84 af 68 c4 68 35 ae 94 c6 52 9a 9b d2 90 37 3d bf 24 24 6d 21 b4 cc 2f c0 91 de 68 75 3c 02 bf 18 d0 6a 65 98 e1 28 ea 37 69 6d ff 37 37 d3 83 f6 8d 98 01 1e fa c3 07 fb 78 76 3b 71 e7 ce fd d8 7d b8 ff 8e b2 4b c7 82 b2 9a c8 a6 2b 4a fb 6a 9d Data Ascii: (8"-]KaT09EB6}G+Vy`IS(8t#X&? SQ0 -P'K~/o(PW2Bb6>CATx6grGW*]f}d:3@(=_(<`F3hh5R7=$$m!/hu<je(7im77xv;q}K+Jj
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 4f c9 5d ea 5d f8 ad 64 8c 94 c7 5a 8a 33 32 4a 40 f2 51 92 86 dc c8 37 3a bc 9f 1d 41 b2 d0 31 97 15 93 91 1a ce cd 3a 91 db 25 61 20 71 b9 95 1f 65 b0 b2 50 9e 5f 85 63 eb 01 2c f1 24 ba 89 05 bc 7f 74 06 f7 6a 61 5c f1 ef e1 42 f0 11 0e 5d 31 06 ea 65 5c 8a 6d 20 40 e9 ab f1 90 1c fd b8 ca fb 2e bc 32 8b e9 d9 28 25 73 1a ce 6d 92 87 52 8d ec d2 8a cd b4 0e 74 ea 50 8e 0e 51 b5 05 b0 1b fa 26 d6 1b e3 78 f4 c1 2a 9a d5 1e 2e ff d6 6f c0 e7 d9 a5 5a b0 e2 80 f5 6e b0 ed 5c 54 2a 2f 9d aa 63 2c dc 42 f5 e3 2d f6 5b 11 2f 7d f5 02 ee 74 e7 d1 af 0e 90 7b f0 0e a6 29 ed 4f 2d 9e 40 a6 ef 44 2b e0 c4 4a 6b 1a dd c8 04 ec 47 75 84 82 ac 5b ed 19 db 82 3e 51 ce c2 c9 f6 4b 67 6a 94 ba c4 9b fd 3c 03 7d 13 21 fa 41 2c ec c5 bd 65 02 e2 06 03 e1 fe 11 b0 dd c0 Data Ascii: O]]dZ32J@Q7:A1:%a qeP_c,$tja\B]1e\m @.2(%smRtPQ&x.oZn\T/c,B-[/}t{)O-@D+JkGu[>QKgj<}!A,e
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: dc 6d 92 8c 76 0c 27 5c 11 2c 32 d8 35 76 6d b8 f3 d7 ef c1 be ba 0f f7 72 11 c3 cd 23 2a 9e 02 da 07 07 e8 ec 3e 86 a3 49 19 4d 66 7e 62 7c 88 4a f9 08 83 f2 2e 5c 91 2e 3a 6c 87 5c d1 85 66 f1 19 1c 8e 09 aa 52 da 79 49 a3 ef 36 24 1d 54 67 0c 7a 83 d6 21 ac e5 0f 68 ab 16 68 c5 87 76 4f 15 8b 01 1c b1 1e a1 11 12 90 b0 1f 16 f6 d9 7e b9 8b d6 d3 7d b6 e1 11 7a 51 27 42 d7 67 f0 94 a0 5c 0a 53 e9 5c ba f0 dc 0f 0e 36 f6 d1 a0 f3 f4 ba 07 f8 52 bf 85 cf cf 5d c1 0b 67 16 31 e7 2e 61 c2 99 c0 e9 d4 59 d2 c5 43 78 4a 87 b8 b7 b5 82 17 92 15 fc bd af 38 70 e6 73 13 18 44 63 58 65 a5 de fb f8 10 57 2e 26 71 f2 ec 00 93 8e 2c be 77 6d 1f af 9f d8 c7 ab 33 07 b8 3c 5b 20 28 66 f1 f6 cd c7 b8 79 fb 97 08 14 56 91 9c bf 82 46 83 b2 ba ba 0e 5f ef 08 ad 66 01 7e Data Ascii: mv'\,25vmr#*>IMf~b\|J.\.:l\fRyI6$Tgz!hhvO~}zQ'Bg\S\6R]g1.aYCxJ8psDcXeW.&q,wm3<[ (fyVF_f~
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 0e e9 4b 2c 7b 4f 09 f9 08 d4 d1 24 bc d6 20 72 e9 65 78 ed 5d 54 6a ec 0f 1f 25 f0 83 8f 7f 34 3c 2a d4 b1 bc ba 83 77 3e 7e 84 1b bf 7c 88 78 32 8a e9 94 0f 03 82 8e 8f 0f 3f 4f 90 fa fe 94 8f 8c 2a 08 af a2 5c b1 44 83 1e a2 ba 96 a3 5c f3 c0 73 3a 6a fa ae d8 71 c3 3d 62 43 71 3d 8b 5f cc 7d 0f 87 d6 1a 5e 7e fe 34 8d a6 41 8d bf 0b 6b 73 1d a3 ce 75 4c 27 d9 31 8c aa de 70 88 8d db 33 91 a1 dd b6 a0 d6 8d a0 d5 77 b2 81 ec 28 75 03 68 92 55 16 2b 76 34 ba 61 d4 88 05 1b 4b b7 b1 76 f7 2d b4 b4 cf 98 06 ea 24 30 39 e5 88 92 42 6e 1a 2b 3b 46 92 42 03 ee da 94 af 25 31 1a 6b 92 c1 4b 2e aa 57 05 08 ea 38 af 87 65 65 a3 2a 59 80 06 98 15 19 15 f9 24 3f 34 7e 2f 8f 92 0c 96 11 1a 6b 30 26 7f 0c 20 b9 5c 11 a5 07 1f c3 47 46 e5 a0 23 0b 50 b4 fe ce 42 47 Data Ascii: K,{O$ rex]Tj%4<w>~\|x2?O\D\s:jq=bCq=_}^~4AksuL'1p3w(uhU+v4aKv-$09Bn+;FB%1kK.W8ee*Y$?4~/k0& \GF#PBG
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: cf fe ec 8f c5 14 7d 96 8e 80 fa 59 5d d1 ae 0a bb 7f b0 b9 13 ff e6 df bd 99 e1 68 07 a0 fe d0 a5 c9 f8 de 0f cf 24 e0 15 03 f9 10 49 18 a7 a9 54 57 6e d7 e3 ca cd ed d8 6a aa cb a3 10 4c 97 9f ba e1 ee 0c 8d 1d 8c 36 72 73 8d 7b 09 66 33 33 55 23 b2 31 ff 36 92 d1 0d e0 08 fa ed d5 e8 ed ae c4 f0 51 8b f2 0e 33 bf d4 e5 ad e5 32 51 89 d1 0f 7a 93 75 c3 66 dc d0 d7 4d 51 0c 65 d7 01 f5 4d bc 40 03 c7 65 e2 b5 6c bc 48 3d 52 0b 00 19 fa 76 7e ba 1c 3f f8 3d cf 67 1e b1 e0 6f c4 e5 10 90 a4 f5 f6 7a 3b da 1b f7 e3 85 73 67 e2 fe cd bb b1 be be 06 30 1d 00 82 32 57 a3 3c fa 9c df 9e bd ec 06 1f e6 3c e6 2c bf cf 50 81 68 a3 ed 74 41 85 d1 5a 99 08 c7 71 4d d7 da e7 fc 03 7a 99 0f 52 ac 5c 2f b8 eb 20 65 9e aa 96 11 67 c6 3e fc 2e 86 36 94 2b 0e 1c 80 1d c4 Data Ascii: }Y]h$ITWnjL6rs{f33U#16Q32QzufMQeM@elH=Rv~?=goz;sg02W<<,PhtAZqMzR\/ eg>.6+
2024-10-30 02:47:33 UTC	15069	IN	Data Raw: af af c5 4b 67 8f 45 fd 83 57 e8 3b d7 e8 ab 0b ca 53 bd 40 77 71 fa 82 96 7a e5 f8 de e8 e8 38 f2 75 53 54 67 f7 3b 89 13 f6 01 56 94 fa 62 8a 4d a6 cb 70 af 11 83 b8 e1 44 67 86 ba a9 b1 c5 10 9f ff 3c e5 50 c6 2e 46 e5 86 08 7f f3 a7 9e 92 e5 e7 05 45 12 2c 2c c7 c1 7d 84 2f 1b b4 20 3b 44 36 68 de 8c 34 35 c1 12 90 d4 7b 3a 20 6f 47 69 20 fc 2f 0b 75 c6 92 22 d4 92 54 60 67 d0 90 1c 3a 0d a8 a0 90 83 a6 c2 e8 41 01 c0 1c 03 ec f4 72 26 d3 ca 7b 58 cd d8 c5 ef 8d b1 89 e9 70 75 42 2e 86 a6 6e 32 bc 2b d7 6e c7 3b 6f bf 89 b1 0f 10 02 a1 d0 48 48 a6 a4 a7 74 00 3a 53 76 1c dc 1f 36 27 d1 1d 21 f0 2c 18 5b d6 8f 7a 79 5f e6 31 52 77 c7 f3 3c 8c 26 13 9e ed 00 fe e5 84 09 cf 2c 12 2c 5d 21 e2 b8 22 f5 a2 25 1a 4d ae 54 b0 13 a0 eb db 84 c1 02 42 15 0a 7f Data Ascii: KgEW;S@wqz8uSTg;VbMpDg<P.FE,,}/ ;D6h45{: oGi /u"T`g:Ar&{XpuB.n2+n;oHHt:Sv6'!,[zy_1Rw<&,,]!"%MTB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49737	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:32 UTC	675	OUT	GET /group/files/page/737/HPRC.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	842	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:32 GMT Content-Type: image/png Content-Length: 122913 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:58 GMT ETag: "65e6e616-1e021" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	15542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 a7 08 06 00 00 00 60 a6 85 24 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 3b 74 45 58 74 43 6f 6d 6d 65 6e 74 00 78 72 3a 64 3a 44 41 46 39 59 5f 62 66 59 62 30 3a 32 2c 6a 3a 31 32 30 38 35 30 39 39 33 39 33 34 31 39 37 39 34 34 31 2c 74 3a 32 34 30 32 32 31 30 33 e6 ab 05 c6 00 00 04 e7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f Data Ascii: PNGIHDR@`$sRGBgAMAapHYs+;tEXtCommentxr:d:DAF9Y_bfYb0:2,j:1208509939341979441,t:24022103iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http:/
2024-10-30 02:47:32 UTC	1509	IN	Data Raw: d5 9e 99 7a 8c 6c 6e 13 6d d1 2a b6 f3 c0 83 85 06 ae de 5d 41 a4 a9 15 09 02 4b 25 94 41 a2 ff 08 1e cd 3c c1 e5 77 3e c0 e6 93 bb e8 08 ad a1 25 9d 66 df b6 61 91 a0 9d 4c 34 61 f0 70 1f 12 c1 16 94 4b 25 24 93 69 82 4f 0b fb 1c 2c cb 86 3d fd d5 d1 f6 92 34 66 ae dc 40 6b 69 03 e5 7c 11 65 1d ad 4f f5 ba 48 80 d4 b1 58 7a 63 64 a7 a7 0f 97 58 c6 06 07 65 2b 25 60 0d 0a 49 6e 61 f2 55 9d 8c 28 e1 22 da 28 21 9a dd c6 0e c1 38 10 8e 52 02 d6 ab 7b 49 7b 77 58 7c 26 15 59 79 96 d8 b6 da 40 2f 66 15 4f 35 f4 44 9a 61 74 92 5b 69 f4 43 87 98 5f 6b 7b 36 58 74 29 82 8d 3a 2f a2 e7 16 78 ed 82 12 07 98 e2 da a0 d5 b0 60 19 7f 12 54 bd 81 e2 86 cd 2e 78 1a 3d 85 d1 cf c0 4f 34 2d 82 1b 64 32 fb a5 0d 4b 43 e3 4b 9f 12 28 64 95 bf a5 e7 9f bd 76 46 4f 7f e0 8a Data Ascii: zlnm*]AK%A<w>%faL4apK%$iO,=4f@ki\|eOHXzcdXe+%`InaU("(!8R{I{wX\|&Yy@/fO5Dat[iC_k{6Xt):/x`T.x=O4-d2KCK(dvFO
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 2d dd fd b8 72 6b 0e 6f be 7d 15 b5 f9 47 18 c0 26 da 33 09 6c b3 dd b5 06 57 a9 94 91 ce 34 d9 5e 50 8a 77 88 26 a2 68 21 80 af 3c bc 47 55 bc 82 18 d5 67 8d 0b 8d 17 3b 8d 27 11 67 df 95 b1 1d 48 a1 d6 d4 84 ce be 6e dc bc 3b 89 f6 28 79 c4 d8 88 03 85 bc 20 0d c3 54 63 31 2a 07 51 20 47 a9 af b9 cb d6 90 d2 f1 18 ca 85 02 72 3a d6 8c bc 44 85 02 9b d4 1c 06 7a bb 59 15 37 12 0d d4 34 88 c9 b8 b2 9b e4 b7 8f 99 ed d8 30 e5 23 fa cc c7 e2 2b ae 1f 6e 97 58 da dd cd 6a bf ce 98 14 68 01 1f 8f af 4b b4 2c 8e fc bc bb 73 db cd cc 5e 18 2f de 8d a7 fd 78 f2 b1 00 5e 6c 07 01 99 da d0 22 7a c6 5e 2f 33 4f d9 99 9a 71 e5 74 54 9d 9f fe 2c 1f 5e 82 3a 07 34 2e 91 2f a1 c9 65 f1 bc 34 86 86 72 fb 79 d1 6b d7 ee 19 97 86 fe 92 12 65 d3 ff 3e 90 94 71 a5 b1 58 06 Data Ascii: -rko}G&3lW4^Pw&h!<GUg;'gHn;(y Tc1*Q Gr:DzY740#+nXjhK,s^/x^l"z^/3OqtT,^:4./e4ryke>qX
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 81 9b 2e cb 87 e9 48 99 76 ff b2 d2 99 9d bf 5e a1 f5 af 72 b9 38 ea 40 c5 73 41 ae 9c d6 d6 fc e3 64 64 6d ac 36 91 51 db db ac 27 07 55 2b ad f3 99 ea 40 fd 2e 4e a0 6a a1 34 d3 d5 d5 89 ce ce 0e 4a 7c 29 9b a5 b5 55 66 8b 80 a8 07 22 9a e1 f5 8d e1 96 f6 56 db e2 a0 7d 89 0b f3 b3 58 5a 58 b0 8f 3a 29 17 6d f6 d5 7e 44 31 6f 9a 2a f4 d8 f8 28 ce 9d 39 89 93 27 8e a0 5b e7 13 92 39 97 96 d7 ec 2d 18 7f fb 82 a4 0a 6d fe ee 68 6f 47 9d 2a a7 11 62 85 f4 7d e5 4a 20 81 32 55 58 7d 9f 59 5b 1a ee ad 52 8d 27 bf 9f 3f 7b 0c 4d 54 45 1f 3f 7e 82 6a 24 84 22 c1 27 12 cd e0 16 55 71 b6 28 55 db 28 96 73 35 e4 f5 94 9b e9 8e 0e 74 22 c7 41 76 6b 72 d1 d6 60 f5 0a e0 f1 e1 4e ac ac e7 b1 5e ae e2 70 22 8c 1c f9 32 3d 7a 10 1b 57 bf 8d 96 18 d5 e6 b2 94 74 82 8d Data Ascii: .Hv^r8@sAddm6Q'U+@.Nj4J\|)Uf"V}XZX:)m~D1o(9'[9-mhoGb}J 2UX}Y[R'?{MTE?~j$"'Uq(U(s5t"Avkr`N^p"2=zWt
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: aa 81 cb 4b f2 53 2d e0 17 a5 6f 53 21 d5 aa c9 9d 82 56 76 f3 ca ec d5 61 59 23 ea e8 c8 2a 43 88 ef 79 b0 7e 5e 38 37 ab 03 cf 89 b6 63 d7 31 27 6c 13 49 7b 32 0e 80 b2 a7 00 ab 56 d2 73 47 88 07 4c 7b fa e2 48 e9 1e d1 0b 4f 42 3e cd 7d a3 da 19 18 53 3d 86 2e 71 10 52 d7 90 eb d2 cd 6b ea 03 8c 3b 0b 44 67 66 d2 00 54 a9 6b 80 50 ba a2 e5 25 9c d4 ec 7c 8c f3 f3 e0 e7 95 89 7b ea 2b b4 aa af 98 49 a2 3d f2 b4 50 97 16 4b b5 18 03 ea aa 0d 47 1b da 60 b9 fb 13 9a ce 17 8f 39 3d 3d e0 69 6d dc e7 31 80 9c f3 e0 e9 99 a9 05 cd cf ce f0 ac 55 6d 6f 6e a8 0e 08 d7 33 30 e1 2d 69 6a a9 a4 8d fa 2e 6c 78 4b 4d ff dd ff e1 af 73 0b 48 cf 43 0f 18 54 b4 21 f9 05 78 44 18 c6 6f e1 b9 a3 f2 c9 80 ff f3 cf ce ac 0d 68 ff cf d9 4b 3e 71 41 fc 23 d3 c9 cd 98 0a 6f Data Ascii: KS-oS!VvaY#*Cy~^87c1'lI{2VsGL{HOB>}S=.qRk;DgfTkP%\|{+I=PKG`9==im1Umon30-ij.lxKMsHCT!xDohK>qA#o
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: d6 56 9b 45 ab bc 4d 61 19 4a dd 20 dd 2d 2a 75 1b 0f 1d 6d 54 3c d3 f3 09 1d fa ec d9 30 79 b8 f7 12 4d f3 7b 79 75 51 f5 0a 5e 80 3f 47 dc 86 d2 a8 2c d7 3f cf 4d c7 5c 55 40 94 82 b6 23 44 ef 93 52 21 c4 f7 fe a8 99 42 51 1b 99 5e b5 b7 40 db 9b f2 ea f3 b4 9f ad 4a ac d8 a1 f2 42 b4 b1 99 35 ba 9d d3 15 ef 7c 58 86 a6 b7 36 c2 18 8c ca f7 32 bf cf ac 6c ea c9 63 87 b4 d9 da ae f6 c6 2a 46 b6 ae 52 df 53 ea df 30 b3 f0 f2 3e bb c9 74 25 5e 06 cf 64 1e 2b c6 6c 16 c2 e7 c9 55 87 c9 28 b2 cb 80 82 b7 02 4a f5 ee 7e 9c 88 81 0e 19 90 0f cf 04 f0 5a 85 cd c8 3b 4b fe dd 8c 91 4f b7 aa 3b 07 06 3a e4 b4 52 a2 84 2e 7a 0c c7 e0 5e 4f 87 0c f0 13 51 01 f2 f6 02 09 5e fd da 8b 04 d8 98 dc ee 68 c0 68 6b cd 63 4b 09 eb 4b c1 b0 9a da dc 8b 48 d9 2b 0b da 29 4d Data Ascii: VEMaJ -umT<0yM{yuQ^?G,?M\U@#DR!BQ^@JB5\|X62lcFRS0>t%^d+lU(J~Z;KO;:R.z^OQ^hhkcKKH+)M
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 15 ca eb 21 73 85 42 17 75 55 47 f6 5d 11 59 7a 34 86 89 94 47 89 a4 9b d3 98 13 f9 cb 17 9a de ec 84 1d e4 f3 45 62 f6 01 9b 8f 86 8b 45 14 62 4f 1f 5d bb ac 8b 77 6e 28 4b c8 d8 d6 06 fa b7 67 d4 9e cf 47 cf 4d 2c 82 49 e1 f3 b0 b3 ed a6 6d 7d 08 1b f8 a3 77 3f d5 0d 57 3e 61 53 34 de a2 2c a3 84 2d f9 f4 96 66 2e 5e 57 3b f4 d4 4c ca 6d 62 6e 18 b7 81 1b cc 02 60 00 41 6f bc 7c f0 4a c6 f5 c4 07 ae f5 32 e1 db 9a ab 36 69 e4 e4 f1 48 bb 2d 5d 20 8f 6e a7 20 54 e7 6f e1 ee 35 fd fe fb 0f 35 57 de d6 26 9e 69 b1 5c 81 c9 49 55 0a 3a 88 e1 b4 e3 79 79 1c 54 da 82 46 c1 f9 92 d0 73 8c 1a 10 4d da 3b 60 80 be 86 f4 47 4e bb 77 0d e5 4f 7b 77 ae 84 96 bb 52 dc 00 5b 84 0d b4 ed 35 f4 d6 6d 42 b6 1a 80 4a 8d d5 11 b8 27 e4 1f ea ca e9 d4 10 ac d1 d5 09 ab 9a Data Ascii: !sBuUG]Yz4GEbEbO]wn(KgGM,Im}w?W>aS4,-f.^W;Lmbn`Ao\|J26iH-] n To55W&i\IU:yyTFsM;`GNwO{wR[5mBJ'
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 73 48 68 66 da 42 cf 16 4f 16 be cc bf d8 c8 76 3b b8 bc ec 18 3f 38 a6 62 da c1 a2 a5 de a5 8e 36 b1 da 3f 48 e8 69 d4 df 8b 81 2a 3c 7c a7 d9 39 6b c0 a9 80 65 ea 78 f3 f2 68 4c e0 d5 09 cc 1d 84 24 e3 d3 57 62 77 ab 58 60 01 a6 52 67 e8 00 e1 72 c3 27 ea 60 88 df 29 1d 34 14 bb 9b b1 f9 fc 61 0c 4f cd 00 a0 28 cf f2 c3 18 7d f7 97 00 5b ea 84 e1 cb 5e 3d 40 ba 93 e7 d5 e0 f9 77 be f9 bb f1 f6 57 01 a6 e1 51 ca 3b 21 6c da cd de d3 0f de ff 28 6e ff e9 77 08 03 6f c6 60 bd 37 0e 9a ae a6 d2 19 83 53 13 f1 bd df fb a3 dc a5 cf 61 36 73 ab db d1 3c 38 8d 71 7e 97 8f 5a 51 2d 77 e5 12 53 3b d0 6c b3 ad 14 ab 6b 9b d9 fe 01 cc 40 7d 62 2c 3a ab 35 40 c2 99 48 0e 64 ee 8f 4f 7e f0 61 7c f5 97 ff 5c f2 d6 70 d1 54 88 c0 97 06 0f 82 cb df 94 35 be 9b ae f0 05 Data Ascii: sHhfBOv;?8b6?Hi*<\|9kexhL$WbwX`Rgr'`)4aO(}[^=@wWQ;!l(nwo`7Sa6s<8q~ZQ-wS;lk@}b,:5@HdO~a\|\pT5
2024-10-30 02:47:33 UTC	7558	IN	Data Raw: c4 29 d8 41 9e 89 1a e6 17 0a ef 87 c7 e5 0c 24 00 d1 b0 d3 55 b3 5d d8 d7 e1 50 bd 00 64 a7 db be 22 a3 39 6f 9e 8a c9 1b 88 5e 78 4d 7a 8d b4 25 c1 27 eb 6c 23 00 60 87 4a 25 cf fd 0d b0 9f f1 eb fc e5 a5 88 46 02 88 e1 a3 de a7 bd e9 be e4 a9 b9 43 c1 5e f0 96 87 9b 1b 1b 71 ff c9 6c dc 7d 32 07 6e 1c c5 cc a5 8b 31 33 3d 19 c3 43 7d e8 4c 29 ba 90 3d 81 15 96 f2 c8 02 cc 92 ff 59 a0 65 39 dc 46 b0 d3 1b 33 64 75 04 8a 83 37 8a b1 91 59 67 53 0c f0 28 07 9f 23 13 b6 c7 89 11 c5 4c 94 c2 f8 78 5d d1 99 51 bc 52 3f ce 5e 29 b5 c8 e1 91 00 08 86 9d cb 9f ef 73 d9 4c 00 fc 87 7f f7 3f 22 6a c2 f5 a4 22 b9 ec 0e 8d 17 04 8a dc 8f f3 12 b1 0c b8 c6 8d ed ed d8 e2 dd d8 de 8d 4d 94 7c 1f a0 73 a8 cb 46 43 6f a9 14 63 fd 35 3c a4 7a 0c 0d 39 35 a7 33 ea b5 82 Data Ascii: )A$U]Pd"9o^xMz%'l#`J%FC^ql}2n13=C}L)=Ye9F3du7YgS(#Lx]QR?^)sL?"j"M\|sFCoc5<z953

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49741	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:32 UTC	535	OUT	GET /js/handlebars.min.js?v=393c8f9fe4ab64db6b154b322a4d9d02af8a8824ca36e0356d867f16fd817aeb7333c0a7eaea55ccbe8cd43ca5e01f0e4f9ff84507f737b6489e4498d284bf77 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	877	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:32 GMT Content-Type: application/javascript Content-Length: 80285 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-1399d" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	15507	IN	Data Raw: 2f 2a 2a 21 0d 0a 0d 0a 20 40 6c 69 63 65 6e 73 65 0d 0a 20 68 61 6e 64 6c 65 62 61 72 73 20 76 34 2e 37 2e 36 0d 0a 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 31 2d 32 30 31 39 20 62 79 20 59 65 68 75 64 61 20 4b 61 74 7a 0d 0a 0d 0a 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0d 0a 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0d 0a 69 6e 20 74 68 65 20 53 6f 66 74 77 61 72 65 Data Ascii: /**! @license handlebars v4.7.6Copyright (C) 2011-2019 by Yehuda KatzPermission is hereby granted, free of charge, to any person obtaining a copyof this software and associated documentation files (the "Software"), to dealin the Software
2024-10-30 02:47:32 UTC	10458	IN	Data Raw: 5b 63 5d 2c 65 3d 76 2e 52 45 56 49 53 49 4f 4e 5f 43 48 41 4e 47 45 53 5b 62 5d 3b 74 68 72 6f 77 20 6e 65 77 20 75 5b 22 64 65 66 61 75 6c 74 22 5d 28 22 54 65 6d 70 6c 61 74 65 20 77 61 73 20 70 72 65 63 6f 6d 70 69 6c 65 64 20 77 69 74 68 20 61 6e 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 48 61 6e 64 6c 65 62 61 72 73 20 74 68 61 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 72 75 6e 74 69 6d 65 2e 20 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 65 63 6f 6d 70 69 6c 65 72 20 74 6f 20 61 20 6e 65 77 65 72 20 76 65 72 73 69 6f 6e 20 28 22 2b 64 2b 22 29 20 6f 72 20 64 6f 77 6e 67 72 61 64 65 20 79 6f 75 72 20 72 75 6e 74 69 6d 65 20 74 6f 20 61 6e 20 6f 6c 64 65 72 20 76 65 72 73 69 6f 6e 20 28 22 2b 65 2b 22 29 2e 22 29 7d 74 Data Ascii: [c],e=v.REVISION_CHANGES[b];throw new u["default"]("Template was precompiled with an older version of Handlebars than the current runtime. Please update your precompiler to a newer version ("+d+") or downgrade your runtime to an older version ("+e+").")}t
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 7b 70 61 74 68 3a 66 5b 68 2d 34 5d 2c 70 61 72 61 6d 73 3a 66 5b 68 2d 33 5d 2c 68 61 73 68 3a 66 5b 68 2d 32 5d 2c 62 6c 6f 63 6b 50 61 72 61 6d 73 3a 66 5b 68 2d 31 5d 2c 73 74 72 69 70 3a 64 2e 73 74 72 69 70 46 6c 61 67 73 28 66 5b 68 2d 35 5d 2c 66 5b 68 5d 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 38 3a 74 68 69 73 2e 24 3d 7b 73 74 72 69 70 3a 64 2e 73 74 72 69 70 46 6c 61 67 73 28 66 5b 68 2d 31 5d 2c 66 5b 68 2d 31 5d 29 2c 70 72 6f 67 72 61 6d 3a 66 5b 68 5d 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 39 3a 76 61 72 20 69 3d 64 2e 70 72 65 70 61 72 65 42 6c 6f 63 6b 28 66 5b 68 2d 32 5d 2c 66 5b 68 2d 31 5d 2c 66 5b 68 5d 2c 66 5b 68 5d 2c 21 31 2c 74 68 69 73 2e 5f 24 29 2c 6a 3d 64 2e 70 72 65 70 61 72 65 50 72 6f 67 72 61 6d 28 5b 69 5d 2c Data Ascii: {path:f[h-4],params:f[h-3],hash:f[h-2],blockParams:f[h-1],strip:d.stripFlags(f[h-5],f[h])};break;case 18:this.$={strip:d.stripFlags(f[h-1],f[h-1]),program:f[h]};break;case 19:var i=d.prepareBlock(f[h-2],f[h-1],f[h],f[h],!1,this._$),j=d.prepareProgram([i],
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 65 6e 67 74 68 2d 31 5d 5d 2c 64 2e 70 75 73 68 28 75 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 30 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 45 4f 46 3a 31 2c 70 61 72 73 65 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 79 79 2e 70 61 72 73 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 3b 74 68 69 73 2e 79 79 2e 70 61 72 73 65 72 2e 70 61 72 73 65 45 72 72 6f 72 28 61 2c 62 29 7d 2c 73 65 74 49 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 70 75 74 3d 61 2c 74 68 69 73 2e 5f 6d 6f 72 65 3d 74 68 69 73 2e 5f 6c 65 73 73 3d 74 68 69 73 2e 64 6f 6e 65 3d 21 31 2c 74 68 69 Data Ascii: ength-1]],d.push(u);break;case 3:return!0}}return!0}},c=function(){var a={EOF:1,parseError:function(a,b){if(!this.yy.parser)throw new Error(a);this.yy.parser.parseError(a,b)},setInput:function(a){return this._input=a,this._more=this._less=this.done=!1,thi
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 69 6f 6e 28 61 29 7b 74 68 69 73 2e 75 73 65 50 61 72 74 69 61 6c 3d 21 30 3b 76 61 72 20 62 3d 61 2e 70 72 6f 67 72 61 6d 3b 62 26 26 28 62 3d 74 68 69 73 2e 63 6f 6d 70 69 6c 65 50 72 6f 67 72 61 6d 28 61 2e 70 72 6f 67 72 61 6d 29 29 3b 76 61 72 20 63 3d 61 2e 70 61 72 61 6d 73 3b 69 66 28 63 2e 6c 65 6e 67 74 68 3e 31 29 74 68 72 6f 77 20 6e 65 77 20 6c 5b 22 64 65 66 61 75 6c 74 22 5d 28 22 55 6e 73 75 70 70 6f 72 74 65 64 20 6e 75 6d 62 65 72 20 6f 66 20 70 61 72 74 69 61 6c 20 61 72 67 75 6d 65 6e 74 73 3a 20 22 2b 63 2e 6c 65 6e 67 74 68 2c 61 29 3b 63 2e 6c 65 6e 67 74 68 7c 7c 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 78 70 6c 69 63 69 74 50 61 72 74 69 61 6c 43 6f 6e 74 65 78 74 3f 74 68 69 73 2e 6f 70 63 6f 64 65 28 22 70 75 73 68 4c 69 74 Data Ascii: ion(a){this.usePartial=!0;var b=a.program;b&&(b=this.compileProgram(a.program));var c=a.params;if(c.length>1)throw new l["default"]("Unsupported number of partial arguments: "+c.length,a);c.length\|\|(this.options.explicitPartialContext?this.opcode("pushLit
2024-10-30 02:47:33 UTC	5168	IN	Data Raw: 73 74 61 63 6b 53 6c 6f 74 2d 2d 2c 74 68 69 73 2e 70 75 73 68 28 62 2e 63 6f 6e 63 61 74 28 69 2c 22 29 22 29 29 7d 2c 69 6e 63 72 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 2b 2b 2c 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 3e 74 68 69 73 2e 73 74 61 63 6b 56 61 72 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 73 74 61 63 6b 56 61 72 73 2e 70 75 73 68 28 22 73 74 61 63 6b 22 2b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 29 2c 74 68 69 73 2e 74 6f 70 53 74 61 63 6b 4e 61 6d 65 28 29 7d 2c 74 6f 70 53 74 61 63 6b 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 73 74 61 63 6b 22 2b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 7d 2c 66 6c 75 73 68 49 6e 6c 69 6e 65 3a 66 Data Ascii: stackSlot--,this.push(b.concat(i,")"))},incrStack:function(){return this.stackSlot++,this.stackSlot>this.stackVars.length&&this.stackVars.push("stack"+this.stackSlot),this.topStackName()},topStackName:function(){return"stack"+this.stackSlot},flushInline:f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49735	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:32 UTC	792	OUT	GET /images/calendar_w.svg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/css/styles.css?v=df42682342af4b30687beb0bc1c68f96cd780f89414a036ed8c17dbe031fcd8004946c5ccea0f2b36ccd7bfdd4bacea3edb59cda81b4afdedfdbeeb3fdb91ab9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	865	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:32 GMT Content-Type: image/svg+xml Content-Length: 1125 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:44 GMT Vary: Accept-Encoding ETag: "646f7fd8-465" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	1125	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49738	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:32 UTC	534	OUT	GET /js/jquery-ui.min.js?v=599c75ac88aa53fcb8e8dfe27171ea2eba050829efcd7cf248866311a7839cb9153b3fb83c48a8d003276742257e159601dacedae0845f63cf23b64b6d82167a HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:32 UTC	878	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:32 GMT Content-Type: application/javascript Content-Length: 251656 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-3d708" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:32 UTC	15506	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 75 69 3d 74 2e 75 69 7c 7c 7b 7d 3b 74 2e 75 69 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 31 32 2e 31 22 3b 76 61 72 20 65 2c 69 3d 30 2c 73 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 3b 74 2e 63 6c 65 61 6e 44 61 74 61 3d 28 65 3d 74 2e 63 6c 65 61 6e 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 73 2c 6e 2c 6f 3b 66 6f 72 28 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 6e 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 74 72 79 7b 28 73 3d 74 2e 5f 64 61 74 61 Data Ascii: !function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(t){t.ui=t.ui\|\|{};t.ui.version="1.12.1";var e,i=0,s=Array.prototype.slice;t.cleanData=(e=t.cleanData,function(i){var s,n,o;for(o=0;null!=(n=i[o]);o++)try{(s=t._data
2024-10-30 02:47:32 UTC	1509	IN	Data Raw: 74 2e 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 22 29 7d 7d 7d 3b 22 31 2e 37 22 3d 3d 3d 74 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 33 29 26 26 28 74 2e 65 61 63 68 28 5b 22 57 69 64 74 68 22 2c 22 48 65 69 67 68 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 73 3d 22 57 69 64 74 68 22 3d 3d 3d 69 3f 5b 22 4c 65 66 74 22 2c 22 52 69 67 68 74 22 5d 3a 5b 22 54 6f 70 22 2c 22 42 6f 74 74 6f 6d 22 5d 2c 6e 3d 69 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6f 3d 7b 69 6e 6e 65 72 57 69 64 74 68 3a 74 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 6f 75 74 65 72 57 69 64 74 68 3a 74 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 6f Data Ascii: t.ui-form-reset")}}};"1.7"===t.fn.jquery.substring(0,3)&&(t.each(["Width","Height"],function(e,i){var s="Width"===i?["Left","Right"]:["Top","Bottom"],n=i.toLowerCase(),o={innerWidth:t.fn.innerWidth,innerHeight:t.fn.innerHeight,outerWidth:t.fn.outerWidth,o
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 3d 3d 3d 69 2c 6e 3d 65 3f 2f 28 61 75 74 6f 7c 73 63 72 6f 6c 6c 7c 68 69 64 64 65 6e 29 2f 3a 2f 28 61 75 74 6f 7c 73 63 72 6f 6c 6c 29 2f 2c 6f 3d 74 68 69 73 2e 70 61 72 65 6e 74 73 28 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 72 65 74 75 72 6e 28 21 73 7c 7c 22 73 74 61 74 69 63 22 21 3d 3d 65 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 29 26 26 6e 2e 74 65 73 74 28 65 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 29 2b 65 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 2d 79 22 29 2b 65 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 2d 78 22 29 29 7d 29 2e 65 71 28 30 29 3b 72 65 74 75 72 6e 22 66 69 78 65 64 22 21 3d 3d 69 26 26 6f 2e 6c 65 6e 67 74 68 3f 6f 3a 74 28 74 68 69 73 5b 30 5d 2e 6f 77 Data Ascii: ===i,n=e?/(auto\|scroll\|hidden)/:/(auto\|scroll)/,o=this.parents().filter(function(){var e=t(this);return(!s\|\|"static"!==e.css("position"))&&n.test(e.css("overflow")+e.css("overflow-y")+e.css("overflow-x"))}).eq(0);return"fixed"!==i&&o.length?o:t(this[0].ow
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 68 28 6f 2e 63 6f 6e 74 61 69 6e 65 72 43 61 63 68 65 29 26 26 28 6e 3d 21 30 2c 74 2e 65 61 63 68 28 73 2e 73 6f 72 74 61 62 6c 65 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 3d 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2c 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 3d 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2c 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 3d 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2c 74 68 69 73 21 3d 3d 6f 26 26 74 68 69 73 2e 5f 69 6e 74 65 72 73 65 63 74 73 57 69 74 68 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 43 61 63 68 65 29 26 26 74 2e 63 6f 6e 74 61 69 6e 73 28 6f 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 65 6c Data Ascii: h(o.containerCache)&&(n=!0,t.each(s.sortables,function(){return this.positionAbs=s.positionAbs,this.helperProportions=s.helperProportions,this.offset.click=s.offset.click,this!==o&&this._intersectsWith(this.containerCache)&&t.contains(o.element[0],this.el
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 5f 70 72 6f 70 6f 72 74 69 6f 6e 61 6c 6c 79 52 65 73 69 7a 65 28 29 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 73 3d 74 68 69 73 2e 5f 68 61 6e 64 6c 65 73 2e 61 64 64 28 74 68 69 73 2e 68 61 6e 64 6c 65 73 5b 69 5d 29 7d 2c 74 68 69 73 2e 5f 72 65 6e 64 65 72 41 78 69 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 73 3d 74 68 69 73 2e 5f 68 61 6e 64 6c 65 73 2e 61 64 64 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 68 61 6e 64 6c 65 22 29 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 73 2e 64 69 73 61 62 6c 65 53 65 6c 65 63 74 69 6f 6e 28 29 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 73 2e 6f 6e 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 66 75 6e 63 74 69 Data Ascii: ,this._proportionallyResize()),this._handles=this._handles.add(this.handles[i])},this._renderAxis(this.element),this._handles=this._handles.add(this.element.find(".ui-resizable-handle")),this._handles.disableSelection(),this._handles.on("mouseover",functi
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 20 6f 3e 72 26 26 28 69 3d 72 2c 72 3d 6f 2c 6f 3d 69 29 2c 61 3e 68 26 26 28 69 3d 68 2c 68 3d 61 2c 61 3d 69 29 2c 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 7b 6c 65 66 74 3a 6f 2c 74 6f 70 3a 61 2c 77 69 64 74 68 3a 72 2d 6f 2c 68 65 69 67 68 74 3a 68 2d 61 7d 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 65 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 2e 64 61 74 61 28 74 68 69 73 2c 22 73 65 6c 65 63 74 61 62 6c 65 2d 69 74 65 6d 22 29 2c 6c 3d 21 31 2c 63 3d 7b 7d 3b 69 26 26 69 2e 65 6c 65 6d 65 6e 74 21 3d 3d 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 26 26 28 63 2e 6c 65 66 74 3d 69 2e 6c 65 66 74 2b 73 2e 65 6c 65 6d 65 6e 74 50 6f 73 2e 6c 65 66 74 2c 63 2e 72 69 67 68 74 3d 69 2e 72 69 67 68 74 2b 73 2e 65 6c 65 6d 65 Data Ascii: o>r&&(i=r,r=o,o=i),a>h&&(i=h,h=a,a=i),this.helper.css({left:o,top:a,width:r-o,height:h-a}),this.selectees.each(function(){var i=t.data(this,"selectable-item"),l=!1,c={};i&&i.element!==s.element[0]&&(c.left=i.left+s.elementPos.left,c.right=i.right+s.eleme
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 29 63 6f 6e 74 69 6e 75 65 3b 64 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 2c 70 3d 69 7d 65 6c 73 65 20 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 2e 63 6f 6e 74 61 69 6e 65 72 43 61 63 68 65 2e 6f 76 65 72 26 26 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 2e 5f 74 72 69 67 67 65 72 28 22 6f 75 74 22 2c 65 2c 74 68 69 73 2e 5f 75 69 48 61 73 68 28 74 68 69 73 29 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 69 5d 2e 63 6f 6e 74 61 69 6e 65 72 43 61 63 68 65 2e 6f 76 65 72 3d 30 29 3b 69 66 28 64 29 69 66 28 31 3d 3d 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 2e 6c 65 6e 67 74 68 29 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 5b 70 5d 2e 63 6f 6e 74 61 69 6e 65 72 43 61 63 68 65 2e 6f 76 65 72 7c 7c 28 Data Ascii: )continue;d=this.containers[i],p=i}else this.containers[i].containerCache.over&&(this.containers[i]._trigger("out",e,this._uiHash(this)),this.containers[i].containerCache.over=0);if(d)if(1===this.containers.length)this.containers[p].containerCache.over\|\|(
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 69 6f 6e 2d 68 65 61 64 65 72 2d 69 63 6f 6e 22 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2c 6e 75 6c 6c 2c 6e 2e 69 63 6f 6e 73 2e 61 63 74 69 76 65 48 65 61 64 65 72 29 2e 5f 61 64 64 43 6c 61 73 73 28 69 2c 6e 75 6c 6c 2c 6e 2e 69 63 6f 6e 73 2e 68 65 61 64 65 72 29 29 2c 72 7c 7c 28 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 61 2c 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 63 6f 6c 6c 61 70 73 65 64 22 29 2e 5f 61 64 64 43 6c 61 73 73 28 61 2c 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 61 63 74 69 76 65 22 2c 22 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 22 29 2c 6e 2e 69 63 6f 6e 73 26 26 28 73 3d 61 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 Data Ascii: ion-header-icon"),this._removeClass(i,null,n.icons.activeHeader)._addClass(i,null,n.icons.header)),r\|\|(this._removeClass(a,"ui-accordion-header-collapsed")._addClass(a,"ui-accordion-header-active","ui-state-active"),n.icons&&(s=a.children(".ui-accordion-h
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 67 65 72 28 22 73 65 61 72 63 68 22 2c 65 29 3f 74 68 69 73 2e 5f 73 65 61 72 63 68 28 74 29 3a 76 6f 69 64 20 30 7d 2c 5f 73 65 61 72 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 70 65 6e 64 69 6e 67 2b 2b 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 6f 61 64 69 6e 67 22 29 2c 74 68 69 73 2e 63 61 6e 63 65 6c 53 65 61 72 63 68 3d 21 31 2c 74 68 69 73 2e 73 6f 75 72 63 65 28 7b 74 65 72 6d 3a 74 7d 2c 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 28 29 29 7d 2c 5f 72 65 73 70 6f 6e 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 2b 2b 74 68 69 73 2e 72 65 71 75 65 73 74 49 6e 64 65 78 3b 72 65 74 75 72 6e 20 74 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 3d 3d Data Ascii: ger("search",e)?this._search(t):void 0},_search:function(t){this.pending++,this._addClass("ui-autocomplete-loading"),this.cancelSearch=!1,this.source({term:t},this._response())},_response:function(){var e=++this.requestIndex;return t.proxy(function(t){e==
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 22 69 74 65 6d 73 22 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 22 69 74 65 6d 73 2e 62 75 74 74 6f 6e 22 5d 29 3a 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 69 74 65 6d 73 26 26 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 69 74 65 6d 73 3d 7b 62 75 74 74 6f 6e 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 69 74 65 6d 73 7d 29 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 29 3b 76 61 72 20 63 3b 74 2e 75 69 2e 62 75 74 74 Data Ascii: rguments[0]&&"items"===arguments[1]?this.controlgroup.apply(this,[arguments[0],"items.button"]):("object"==typeof arguments[0]&&arguments[0].items&&(arguments[0].items={button:arguments[0].items}),this.controlgroup.apply(this,arguments))});var c;t.ui.butt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49742	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:32 UTC	531	OUT	GET /js/moment.min.js?v=a935d120cc992056fc89071f8d75823bcf8ce536dcdfc422e56cdd3ce6191c8959a730471b72f76f2f3804104e8911a211beca2ad00e02ce6a61d52266240d35 HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:33 UTC	876	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:33 GMT Content-Type: application/javascript Content-Length: 58862 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-e5ee" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:33 UTC	15508	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 6d 6f 6d 65 6e 74 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.moment=t()}(this,function(){"use strict";var e,i;function f(){return e.apply(null,arguments)}function o(e){return e in
2024-10-30 02:47:33 UTC	1509	IN	Data Raw: 2c 6c 74 28 65 29 2c 69 74 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 29 7b 76 61 72 20 74 3b 69 66 28 65 26 26 65 2e 5f 6c 6f 63 61 6c 65 26 26 65 2e 5f 6c 6f 63 61 6c 65 2e 5f 61 62 62 72 26 26 28 65 3d 65 2e 5f 6c 6f 63 61 6c 65 2e 5f 61 62 62 72 29 2c 21 65 29 72 65 74 75 72 6e 20 6e 74 3b 69 66 28 21 6f 28 65 29 29 7b 69 66 28 74 3d 75 74 28 65 29 29 72 65 74 75 72 6e 20 74 3b 65 3d 5b 65 5d 7d 72 65 74 75 72 6e 20 6f 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 5f 61 3b 72 65 74 75 72 6e 20 6e 26 26 2d 32 3d 3d 3d 79 28 65 29 2e 6f 76 65 72 66 6c 6f 77 26 26 28 74 3d 6e 5b 76 65 5d 3c 30 7c 7c 31 31 3c 6e 5b 76 65 5d 3f 76 65 3a 6e 5b 6b 65 5d 3c 31 7c 7c 6e 5b 6b 65 5d 3e 78 65 28 6e 5b 70 65 5d Data Ascii: ,lt(e),it[e]}function dt(e){var t;if(e&&e._locale&&e._locale._abbr&&(e=e._locale._abbr),!e)return nt;if(!o(e)){if(t=ut(e))return t;e=[e]}return ot(e)}function ct(e){var t,n=e._a;return n&&-2===y(e).overflow&&(t=n[ve]<0\|\|11<n[ve]?ve:n[ke]<1\|\|n[ke]>xe(n[pe]
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 74 65 5c 28 28 2d 3f 5c 64 2b 29 2f 69 2c 70 74 3d 2f 5e 28 3f 3a 28 4d 6f 6e 7c 54 75 65 7c 57 65 64 7c 54 68 75 7c 46 72 69 7c 53 61 74 7c 53 75 6e 29 2c 3f 5c 73 29 3f 28 5c 64 7b 31 2c 32 7d 29 5c 73 28 4a 61 6e 7c 46 65 62 7c 4d 61 72 7c 41 70 72 7c 4d 61 79 7c 4a 75 6e 7c 4a 75 6c 7c 41 75 67 7c 53 65 70 7c 4f 63 74 7c 4e 6f 76 7c 44 65 63 29 5c 73 28 5c 64 7b 32 2c 34 7d 29 5c 73 28 5c 64 5c 64 29 3a 28 5c 64 5c 64 29 28 3f 3a 3a 28 5c 64 5c 64 29 29 3f 5c 73 28 3f 3a 28 55 54 7c 47 4d 54 7c 5b 45 43 4d 50 5d 5b 53 44 5d 54 29 7c 28 5b 5a 7a 5d 29 7c 28 5b 2b 2d 5d 5c 64 7b 34 7d 29 29 24 2f 2c 76 74 3d 7b 55 54 3a 30 2c 47 4d 54 3a 30 2c 45 44 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d Data Ascii: te\((-?\d+)/i,pt=/^(?:(Mon\|Tue\|Wed\|Thu\|Fri\|Sat\|Sun),?\s)?(\d{1,2})\s(Jan\|Feb\|Mar\|Apr\|May\|Jun\|Jul\|Aug\|Sep\|Oct\|Nov\|Dec)\s(\d{2,4})\s(\d\d):(\d\d)(?::(\d\d))?\s(?:(UT\|GMT\|[ECMP][SD]T)\|([Zz])\|([+-]\d{4}))$/,vt={UT:0,GMT:0,EDT:-240,EST:-300,CDT:-300,CST:-360,M
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 65 22 77 65 65 6b 22 3a 74 3d 6e 28 74 68 69 73 2e 79 65 61 72 28 29 2c 74 68 69 73 2e 6d 6f 6e 74 68 28 29 2c 74 68 69 73 2e 64 61 74 65 28 29 2d 74 68 69 73 2e 77 65 65 6b 64 61 79 28 29 2b 37 29 2d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 69 73 6f 57 65 65 6b 22 3a 74 3d 6e 28 74 68 69 73 2e 79 65 61 72 28 29 2c 74 68 69 73 2e 6d 6f 6e 74 68 28 29 2c 74 68 69 73 2e 64 61 74 65 28 29 2d 28 74 68 69 73 2e 69 73 6f 57 65 65 6b 64 61 79 28 29 2d 31 29 2b 37 29 2d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 61 79 22 3a 63 61 73 65 22 64 61 74 65 22 3a 74 3d 6e 28 74 68 69 73 2e 79 65 61 72 28 29 2c 74 68 69 73 2e 6d 6f 6e 74 68 28 29 2c 74 68 69 73 2e 64 61 74 65 28 29 2b 31 29 2d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 6f 75 72 22 3a 74 3d 74 68 69 73 2e 5f Data Ascii: e"week":t=n(this.year(),this.month(),this.date()-this.weekday()+7)-1;break;case"isoWeek":t=n(this.year(),this.month(),this.date()-(this.isoWeekday()-1)+7)-1;break;case"day":case"date":t=n(this.year(),this.month(),this.date()+1)-1;break;case"hour":t=this._
2024-10-30 02:47:33 UTC	9077	IN	Data Raw: 69 3d 77 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 73 68 6f 72 74 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 29 3f 69 3a 6e 75 6c 6c 3a 2d 31 21 3d 3d 28 69 3d 77 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 6d 69 6e 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 29 3f 69 3a 6e 75 6c 6c 3a 22 64 64 64 64 22 3d 3d 3d 74 3f 2d 31 21 3d 3d 28 69 3d 77 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 77 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 29 7c 7c 2d 31 21 3d 3d 28 69 3d 77 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 73 68 6f 72 74 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 29 7c 7c 2d 31 21 3d 3d 28 69 3d 77 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 6d 69 6e 57 65 65 6b 64 61 79 73 50 61 72 73 65 2c 61 29 29 3f 69 3a 6e 75 6c 6c 3a 22 64 64 64 22 3d 3d 3d 74 3f 2d Data Ascii: i=we.call(this._shortWeekdaysParse,a))?i:null:-1!==(i=we.call(this._minWeekdaysParse,a))?i:null:"dddd"===t?-1!==(i=we.call(this._weekdaysParse,a))\|\|-1!==(i=we.call(this._shortWeekdaysParse,a))\|\|-1!==(i=we.call(this._minWeekdaysParse,a))?i:null:"ddd"===t?-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49743	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:33 UTC	396	OUT	GET /js/s_code.js HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:33 UTC	876	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:33 GMT Content-Type: application/javascript Content-Length: 40671 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:40 GMT Vary: Accept-Encoding ETag: "646f7fd4-9edf" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:33 UTC	15508	IN	Data Raw: 2f 2a 20 53 69 74 65 43 61 74 61 6c 79 73 74 20 63 6f 64 65 20 76 65 72 73 69 6f 6e 3a 20 48 2e 32 31 2e 0d 0a 43 6f 70 79 72 69 67 68 74 20 31 39 39 36 2d 32 30 31 30 20 41 64 6f 62 65 2c 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 4d 6f 72 65 20 69 6e 66 6f 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 6d 6e 69 74 75 72 65 2e 63 6f 6d 20 2a 2f 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 73 74 72 69 6e 67 28 6b 65 79 2c 20 64 65 66 61 75 6c 74 5f 29 0d 0a 7b 0d 0a 20 20 69 66 20 28 64 65 66 61 75 6c 74 5f 3d 3d 6e 75 6c 6c 29 20 64 65 66 61 75 6c 74 5f 3d 22 22 3b 0d 0a 20 20 6b 65 79 20 3d 20 6b 65 79 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5b 5d 2f 2c 22 5c 5c 5c 5b 22 Data Ascii: /* SiteCatalyst code version: H.21.Copyright 1996-2010 Adobe, Inc. All Rights ReservedMore info available at http://www.omniture.com */function getQuerystring(key, default_){ if (default_==null) default_=""; key = key.replace(/[\[]/,"\\\["
2024-10-30 02:47:33 UTC	16379	IN	Data Raw: 72 70 6c 61 7a 61 68 6f 74 65 6c 22 0d 0a 73 2e 64 63 3d 22 31 32 32 22 0d 0a 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 44 4f 20 4e 4f 54 20 41 4c 54 45 52 20 41 4e 59 54 48 49 4e 47 20 42 45 4c 4f 57 20 54 48 49 53 20 4c 49 4e 45 20 21 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 76 61 72 20 73 5f 63 6f 64 65 3d 27 27 2c 73 5f 6f 62 6a 65 63 74 49 44 3b 66 75 6e 63 74 69 6f 6e 20 73 5f 67 69 28 75 6e 2c 70 67 2c 73 73 29 7b 76 61 72 20 63 3d 22 73 2e 5f 63 3d 27 73 5f 63 27 3b 73 2e 77 64 3d 77 69 6e 64 6f 77 3b 69 66 28 21 73 2e 77 64 2e 73 5f 63 5f 69 6e 29 7b 73 2e 77 64 2e 73 5f 63 5f 69 6c 3d 6e 65 77 20 41 72 72 61 79 3b 73 2e 77 64 2e 73 5f 63 5f 69 6e 3d 30 3b 7d 73 2e 5f 69 6c 3d 73 2e 77 64 2e 73 5f 63 5f 69 6c 3b 73 2e 5f 69 Data Ascii: rplazahotel"s.dc="122"/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/var s_code='',s_objectID;function s_gi(un,pg,ss){var c="s._c='s_c';s.wd=window;if(!s.wd.s_c_in){s.wd.s_c_il=new Array;s.wd.s_c_in=0;}s._il=s.wd.s_c_il;s._i
2024-10-30 02:47:33 UTC	3028	IN	Data Raw: 27 2b 74 5d 3d 31 7d 7d 3b 73 2e 64 6c 74 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 27 76 61 72 20 73 3d 73 5f 63 5f 69 6c 5b 27 2b 73 2e 5f 69 6e 2b 27 5d 2c 64 3d 6e 65 77 20 44 61 74 65 2c 69 2c 76 6f 2c 66 3d 30 3b 69 66 28 73 2e 64 22 0d 0a 2b 22 6c 6c 29 66 6f 72 28 69 3d 30 3b 69 3c 73 2e 64 6c 6c 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 6f 3d 73 2e 64 6c 6c 5b 69 5d 3b 69 66 28 76 6f 29 7b 69 66 28 21 73 2e 6d 5f 6d 28 5c 22 64 5c 22 29 7c 7c 64 2e 67 65 74 54 69 6d 65 28 29 2d 76 6f 2e 5f 74 3e 3d 73 2e 6d 61 78 44 65 6c 61 79 29 7b 73 2e 64 6c 6c 5b 69 5d 3d 30 3b 73 2e 74 28 76 6f 29 7d 65 6c 73 65 20 66 3d 31 7d 7d 69 66 28 73 2e 64 6c 69 29 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 73 2e 64 6c 69 29 3b 73 2e 64 6c 69 3d 30 3b 69 66 28 66 29 7b Data Ascii: '+t]=1}};s.dlt=new Function('var s=s_c_il['+s._in+'],d=new Date,i,vo,f=0;if(s.d"+"ll)for(i=0;i<s.dll.length;i++){vo=s.dll[i];if(vo){if(!s.m_m(\"d\")\|\|d.getTime()-vo._t>=s.maxDelay){s.dll[i]=0;s.t(vo)}else f=1}}if(s.dli)clearTimeout(s.dli);s.dli=0;if(f){
2024-10-30 02:47:33 UTC	5756	IN	Data Raw: 3d 30 29 72 65 74 75 72 6e 20 27 27 7d 74 61 3d 6e 3f 6f 2e 74 61 72 67 65 74 3a 31 3b 68 3d 73 2e 6f 68 28 6f 29 3b 69 3d 68 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 3b 68 3d 73 2e 6c 69 6e 6b 4c 65 61 76 65 51 75 65 72 79 53 74 72 69 6e 67 7c 22 0d 0a 2b 22 7c 69 3c 30 3f 68 3a 68 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 69 29 3b 6c 3d 73 2e 6c 69 6e 6b 4e 61 6d 65 3b 74 3d 73 2e 6c 69 6e 6b 54 79 70 65 3f 73 2e 6c 69 6e 6b 54 79 70 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 73 2e 6c 74 28 68 29 3b 69 66 28 74 26 26 28 68 7c 7c 6c 29 29 71 2b 3d 27 26 70 65 3d 6c 6e 6b 5f 27 2b 28 74 3d 3d 27 64 27 7c 7c 74 3d 3d 27 65 27 3f 73 2e 61 70 65 28 74 29 3a 27 6f 27 29 2b 28 68 3f 27 26 70 65 76 31 3d 27 2b 73 2e 61 70 65 28 68 29 3a 27 27 29 2b 28 6c 3f 27 Data Ascii: =0)return ''}ta=n?o.target:1;h=s.oh(o);i=h.indexOf('?');h=s.linkLeaveQueryString\|"+"\|i<0?h:h.substring(0,i);l=s.linkName;t=s.linkType?s.linkType.toLowerCase():s.lt(h);if(t&&(h\|\|l))q+='&pe=lnk_'+(t=='d'\|\|t=='e'?s.ape(t):'o')+(h?'&pev1='+s.ape(h):'')+(l?'

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:33 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:33 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:33 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024733Z-r197bdfb6b466qclztvgs64z10000000094g000000008s9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:33 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-30 02:47:33 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49745	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:33 UTC	676	OUT	GET /group/files/page/737/HP8D9.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:34 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:33 GMT Content-Type: image/jpeg Content-Length: 32499 Connection: close Server: nginx Last-Modified: Sun, 15 Sep 2024 16:00:57 GMT ETag: "66e704b9-7ef3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:34 UTC	8103	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 33 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 01 40 00 00 a0 03 00 03 00 00 00 01 00 f0 00 00 00 00 00 00 00 00 ff e1 05 08 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 Data Ascii: JFIF``ExifMM*V^(if``02310100@http://ns.adobe.com/xap/1.0/<x:xmpmeta
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 8c 66 53 ef 9c 71 5e 07 e3 9b 4b cb ad 0e 4d 26 3d 6b 58 87 49 20 ab 59 47 7a eb 03 00 cc e4 ec ff 00 7c 83 bb 39 c0 ae d3 5d f8 81 a9 c7 a6 35 bb 58 aa dd 49 0a c9 0d bc f3 b4 70 cc ac 32 0e ec 7c a0 8e e7 15 e7 7e 2b d6 ef 2d 35 0b 4b 7b 9d 2d a3 92 f2 d0 4e a0 5d 6e 0b f3 15 74 c8 18 38 20 f2 2b cf 96 3a 6d 46 b4 5f 2a 5b a4 76 61 70 1e ce 52 a7 55 73 27 b5 ff 00 42 4f 82 5a 3b 78 37 53 16 36 ea b1 f9 6c f2 5a cf 24 6d 37 da 01 04 ba 47 13 6c 49 31 85 c9 dd 85 3c 2f 3c 53 bc 63 f0 f6 e3 52 97 4f fe d8 b5 92 44 8e 16 92 e7 ce 50 8b b5 bc c0 bf 23 67 60 1f 22 e5 0b 0c 1f ee fc b5 a3 f0 5f c6 3a 9d a6 bf 70 b6 1e 1d fe d8 8e 3b 76 9a 6b 16 bb 30 a9 10 c9 e6 1f 9b 92 7e 6e 40 18 2c 38 35 d7 7e d1 5f 10 e6 b8 f0 07 84 fc 48 d6 b6 ed 6f e2 eb 7b 89 3e c9 03 Data Ascii: fSq^KM&=kXI YGz\|9]5XIp2\|~+-5K{-N]nt8 +:mF_*[vapRUs'BOZ;x7S6lZ$m7GlI1</<ScRODP#g`"_:p;vk0~n@,85~_Ho{>
2024-10-30 02:47:34 UTC	8012	IN	Data Raw: ad 25 84 aa 75 14 36 d1 81 1c 68 aa 58 7c aa 1b 90 3e f7 ad 6b 6a bf 1d 2c fc 33 e1 98 fc 3b e0 d9 34 c8 9e 21 e5 8b 87 86 4d a1 71 9d e2 27 55 25 b1 fc 0c 76 7f b5 5e 73 a9 f8 b6 1f 12 45 6d 1e 8b e2 0d 26 2f b3 b7 93 b9 a1 11 cd 72 be 5a a7 27 ca 66 27 00 f0 30 7d aa 4f 11 78 75 75 0d 3d 2c 75 cb ad 05 6d ef 25 ca 4b 69 74 f6 cc 02 9c 24 65 12 16 c1 75 e9 92 33 5d 98 cc 65 65 5b dd 48 e5 c3 e0 a8 3a 17 9c 8f 42 f8 5f fb 5b 78 67 f6 75 69 f5 58 bc 27 06 ab e2 6d 42 33 15 f7 88 35 6f 11 2f f6 95 d9 18 fd c0 2d 16 23 87 91 fb b4 01 7d a9 7c 77 fb 4c 5f 7c 75 f0 be 97 2e a5 79 1f 86 7c 37 75 3c f7 93 69 7b d9 c6 a3 e7 35 c3 81 2c b1 2b 09 00 00 90 54 90 7f 8b 0d f3 57 90 2f ec 35 f1 23 4b d2 6e 35 6d 26 c7 c2 b6 b6 3b 9a 67 bb d4 b5 89 96 4b 44 3b 0e 5b 72 Data Ascii: %u6hX\|>kj,3;4!Mq'U%v^sEm&/rZ'f'0}Oxuu=,um%Kit$eu3]ee[H:B_[xguiX'mB35o/-#}\|wL_\|u.y\|7u<i{5,+TW/5#Kn5m&;gKD;[r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49746	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:33 UTC	672	OUT	GET /images/weather-icon/60.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:34 UTC	838	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:33 GMT Content-Type: image/png Content-Length: 2898 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:43 GMT ETag: "646f7fd7-b52" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:34 UTC	2898	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 33 20 37 39 2e 31 36 34 35 32 37 2c 20 32 30 32 30 2f 31 30 2f 31 35 2d 31 37 3a 34 38 3a 33 32 20 20 Data Ascii: PNGIHDRxxtEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49749	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:34 UTC	407	OUT	GET /images/heaeder_lang.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:34 UTC	838	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:34 GMT Content-Type: image/png Content-Length: 1192 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:44 GMT ETag: "646f7fd8-4a8" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:34 UTC	1192	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 08 06 00 00 00 3b d6 95 4a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDR;JtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	49748	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:34 UTC	413	OUT	GET /group/files/page/737/KLNH.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:34 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:34 GMT Content-Type: image/jpeg Content-Length: 40445 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:58 GMT ETag: "65e6e616-9dfd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:34 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 01 06 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 33 31 91 01 00 07 00 00 00 04 01 02 03 00 92 86 00 07 00 00 00 3b 00 00 00 c0 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 01 40 00 00 a0 03 00 03 00 00 00 01 00 f0 00 00 00 00 00 00 41 53 43 49 49 00 00 00 78 72 3a 64 3a 44 41 46 39 66 43 42 30 57 6c 49 3a 33 2c 6a 3a 33 36 31 35 Data Ascii: JFIF``ExifMM*V^(if``0231;0100@ASCIIxr:d:DAF9fCB0WlI:3,j:3615
2024-10-30 02:47:34 UTC	1509	IN	Data Raw: e1 e8 e3 70 f7 55 35 8a b6 ed 49 6b b7 9e e7 77 85 b8 8a f2 c4 e2 32 0a d4 d5 4a 35 25 19 5a 4a ea 32 a6 ec b7 d1 5d 5b 5e c8 fa 9f e1 a7 ed 03 a1 f8 6b c3 da 3e 9d e3 cb 48 6f 75 25 7b 49 d2 c4 37 9f 6d 69 34 76 6b 6a b0 4d b8 e5 a3 2d bc 1e bb 7c dc 91 5f 0a fc 73 f8 d9 e3 1f da 5b e2 cf 8d bc 4b ad 0d d7 12 5d c3 1c 70 5b cb e7 25 bd a3 89 c2 c7 10 c6 36 2c 71 46 a0 29 c1 0c 48 39 3c fa 1f ec f2 d2 7e d6 5e 1b f8 9b e2 c8 f5 a9 e3 6f 87 9a 54 5a dc 31 24 ad 10 b9 b9 6b 88 c2 02 e0 fe ec 30 12 02 57 9c b6 46 2b ac f0 6f c4 db 4f 1a 78 36 ea fb 45 d3 f4 bd 53 53 d4 ac 77 5f c5 1d b3 47 71 77 e6 3b 9f b4 da ee 3b 05 c7 0c 24 89 70 db 81 2a 19 9b 15 97 87 f8 1a b8 55 53 13 8c d1 49 da f6 db d7 b2 77 d0 bf a4 16 27 07 4b 13 43 29 c2 eb 24 a3 29 6b 64 f5 d1 Data Ascii: pU5Ikw2J5%ZJ2][^k>Hou%{I7mi4vkjM-\|_s[K]p[%6,qF)H9<~^oTZ1$k0WF+oOx6ESSw_Gqw;;$p*USIw'KC)$)kd
2024-10-30 02:47:34 UTC	16384	IN	Data Raw: 3f c9 3e 76 a3 e1 f8 e7 83 63 12 77 c4 1a 37 4c 8f a3 48 3f 0a f3 df 88 bf b5 a6 a1 e2 bf 8e 56 1e 22 5d 3e e2 f6 f3 c3 d7 51 5c 69 d0 92 4a f9 b0 c8 b2 65 d4 02 58 7c bd 38 f7 af 4a f0 c7 86 b4 5d 43 c4 96 9a 87 84 24 98 b7 8a 12 e2 de 7d 16 14 32 49 69 37 96 c4 98 c0 eb 1f 5e bf 77 8e dd 3e ad fd 81 ff 00 e0 9d 47 f6 60 fd aa 7c 2f e3 bf 14 49 a0 f8 83 c3 37 3a 3d e5 cc 9a 75 d9 02 e2 d6 fa 54 60 8d 1c 6e 36 3a 0d aa a5 f2 0e 48 38 18 af bb c8 f0 b8 29 62 e7 52 aa e5 4f 55 7b ab 5d ea be f3 f2 4f 14 78 93 11 81 cb 69 61 e9 35 2a 9a a7 1e ad 74 7e 87 d3 7a 2d 97 c3 cf f8 2c 47 ec 47 a7 d8 78 77 c4 57 3e 1d 8e e6 fe 7d 4b 54 8f 4c 54 92 7d 2a f2 6b 39 ed 26 8a ee 06 65 2d f2 dc c9 22 38 60 37 00 70 cb c1 f7 5f 01 fe c3 bf 0c fe 1d f8 6b 5a d1 fc 23 67 a7 Data Ascii: ?>vcw7LH?V"]>Q\iJeX\|8J]C$}2Ii7^w>G`\|/I7:=uT`n6:H8)bROU{]Oxia5t~z-,GGxwW>}KTLT}k9&e-"8`7p_kZ#g
2024-10-30 02:47:34 UTC	7009	IN	Data Raw: d3 e1 03 33 42 c1 83 09 b3 d1 40 5f 4e 4e 71 9c 73 5c 0f c6 af 18 43 ac fc 47 f0 bf 92 2e 63 8e f2 f2 e0 97 92 31 fb ad c5 4f 50 5b 20 60 72 2b c5 7f 6c d9 e4 d5 3f 6d e5 f1 45 a5 c5 d2 e9 5a 25 8c 1a 4d a4 b2 83 e4 db dc f9 0b 2c 85 42 f7 31 49 10 38 1c 16 1e a2 be 33 01 87 86 22 55 15 f9 57 2d f4 ea d2 b2 fb de e7 da d3 c2 d2 f6 b8 79 d5 57 92 4f f3 d1 7c ba 1f 77 7c 1e f1 37 87 7c 5d e2 48 b5 a8 e6 95 6f 74 b8 9b 4e 9e 79 e1 c6 e5 0a b2 10 37 31 55 07 8c 91 82 78 cf 41 5d 7f c7 cf da b3 43 f8 29 a2 69 b0 dd 5b c5 76 da f4 c2 cf 4a 30 11 99 e4 c8 52 c1 b2 54 0e 57 24 1c 72 0e 39 af 9b 3f 60 2d 6e d7 e2 3f c3 ff 00 10 7d b3 50 b3 d6 e1 b8 d4 da 39 92 db cc 69 6d 88 86 2c a3 ef 55 f9 c6 01 ca 16 18 65 e4 f4 af 44 f8 d3 e2 cf 0c cd f1 93 4b f0 ce a3 a5 58 Data Ascii: 3B@_NNqs\CG.c1OP[ `r+l?mEZ%M,B1I83"UW-yWO\|w\|7\|]HotNy71UxA]C)i[vJ0RTW$r9?`-n?}P9im,UeDKX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	49750	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:34 UTC	708	OUT	GET /group/files/website/9/5e0d1617-e33e-4602-9a72-77c72342a239.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:34 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:34 GMT Content-Type: image/png Content-Length: 13398 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:21 GMT ETag: "646e896d-3456" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:34 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 01 2c 08 06 00 00 00 50 56 b3 b7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 7f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDR,PVtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53
2024-10-30 02:47:34 UTC	5294	IN	Data Raw: fa 6e a4 ae c5 66 f9 db 7c 77 8f 9a 3a f9 fe 54 44 59 4c 15 f4 be 1e bd b5 f3 73 9a e5 e7 d1 cd df 9e 3b 7b d4 b1 63 11 fb fa d8 f7 f7 83 bf 59 4f f7 6b ee ea 11 82 ce 71 b6 69 53 4f 93 42 9c e3 d1 64 1b 2f 52 0c 7e ad ed fd 3a db fa be 75 2c d5 6c bd 35 c7 7e 7a 79 84 bb aa 5f e3 34 8f 12 14 a1 ad 50 e4 3d ec eb d7 37 db cf 61 ba df c7 4e 7e 0e 71 64 af 8a 23 6a 8b a7 4a 3b 0f b8 be a9 41 be 1a e0 c5 ac 2a d6 5c 29 b5 6c bc 5f e7 22 51 b4 f8 86 9f 8b 06 0c 1e 55 c3 fc be 84 47 c1 7b 87 b9 bb 87 cb 86 d2 f4 65 3f af eb 3c ff 54 82 be 31 5e ea f9 24 d3 06 f3 7b cf 47 9d a3 bc a8 fb 74 52 48 86 10 cb 86 2a 25 3d e4 51 fc 64 ff bb e8 ee f7 9c 5a fa 0d 0a 46 d8 d8 c5 d6 b3 8b b9 87 ae d9 55 d8 57 db 50 5c b3 85 05 fc 81 de 54 a5 7d 55 f3 dc 8a 5d af 98 75 b3 Data Ascii: nf\|w:TDYLs;{cYOkqiSOBd/R~:u,l5~zy_4P=7aN~qd#jJ;A\)l_"QUG{e?<T1^${GtRH%=QdZFUWP\T}U]u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49751	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:34 UTC	634	OUT	GET /group/files/page/737/HG.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:34 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:34 GMT Content-Type: image/png Content-Length: 11129 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:48 GMT ETag: "65dc1ac4-2b79" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:34 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 24 00 00 00 64 08 06 00 00 00 2f d6 4d 34 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 90 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f Data Ascii: PNGIHDR$d/M4sRGBgAMAapHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/
2024-10-30 02:47:34 UTC	3025	IN	Data Raw: 5a 98 e9 c8 7c dc 4f d0 78 f0 04 9e a2 18 7c 33 a6 16 ea ac 04 d8 ef d6 25 88 08 7e 47 f5 53 b5 ba 0f e2 a9 d9 73 7c c5 74 7a d3 36 19 a2 9a 85 96 4a c3 fe 63 58 a1 4e 04 63 4b 6b 38 bd 76 1e 4f cd 1e f2 e1 e9 a5 a1 ba c0 e0 db 5f 75 f9 62 05 95 7e 03 05 29 fb 17 d3 f3 4b a7 e8 d9 56 ef d4 97 a7 e4 1d cc 2d 65 f7 fe 03 89 5d fb 49 8b 79 aa 6a d4 ee 3e 44 e5 7a 2d 0d 4d ac 31 55 9c df bd 2f 9f 66 2f b9 28 a8 d5 4d 79 1e c8 0e df 9b 17 a8 9e ab 02 b3 e0 da 8c 9b 4f 75 7f 11 6c f9 e9 85 e3 7c 8b 9c 81 75 a8 c6 16 d6 30 fd 94 37 30 97 93 7e 63 79 97 ea 7c 6d d6 68 31 cb 1a ad 6b 95 a1 5b 24 03 1d 43 7c 81 2b 07 9f 17 d6 41 e1 4b dc 6b cb b2 2f 82 c4 cb 9a ca 19 57 1f 2b 4a e9 d7 f1 a4 73 2e 48 07 e6 8c 84 81 6b f6 d3 77 33 1b 47 aa 6c 45 2b 69 0f 53 cc 9c c2 Data Ascii: Z\|Ox\|3%~GSs\|tz6JcXNcKk8vO_ub~)KV-e]Iyj>Dz-M1U/f/(MyOul\|u070~cy\|mh1k[$C\|+AKk/W+Js.Hkw3GlE+iS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49752	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	405	OUT	GET /images/calendar_w.svg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:35 UTC	865	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/svg+xml Content-Length: 1125 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:44 GMT Vary: Accept-Encoding ETag: "646f7fd8-465" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:35 UTC	1125	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49753	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	636	OUT	GET /group/files/page/737/HGHK.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:35 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/jpeg Content-Length: 53478 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-d0e6" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:35 UTC	8103	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 19 10 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 32 3a 32 31 20 31 36 3a 34 38 3a 35 32 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 40 a0 03 00 04 00 00 00 01 00 00 00 f0 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF,,ExifMM*bj(1r2i-'-'Adobe Photoshop 25.4 (Windows)2024:02:21 16:48:52@
2024-10-30 02:47:35 UTC	16384	IN	Data Raw: 6e 65 6e 75 6d 00 00 00 0c 45 53 6c 69 63 65 4f 72 69 67 69 6e 00 00 00 0d 61 75 74 6f 47 65 6e 65 72 61 74 65 64 00 00 00 00 54 79 70 65 65 6e 75 6d 00 00 00 0a 45 53 6c 69 63 65 54 79 70 65 00 00 00 00 49 6d 67 20 00 00 00 06 62 6f 75 6e 64 73 4f 62 6a 63 00 00 00 01 00 00 00 00 00 00 52 63 74 31 00 00 00 04 00 00 00 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 00 f0 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 01 40 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e 75 6c 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 4d 73 67 65 54 45 58 54 00 00 00 01 00 00 00 00 00 06 61 6c 74 54 61 67 54 45 58 54 00 00 00 01 00 00 00 00 00 0e 63 65 6c 6c 54 65 78 74 49 73 Data Ascii: nenumESliceOriginautoGeneratedTypeenumESliceTypeImg boundsObjcRct1Top longLeftlongBtomlongRghtlong@urlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIs
2024-10-30 02:47:35 UTC	16384	IN	Data Raw: f6 6b f8 24 63 81 0b 2c 84 7a 05 39 3f a0 ae ea 79 84 b7 93 39 ff 00 b2 5b 5a 9f 8c bf b3 1b 7f c2 6d ff 00 05 35 f1 86 a0 df 3f db 3c 6b 7c f9 f5 f2 e5 ba 20 ff 00 e3 82 bf 4e f4 9d 07 c8 f0 fd 9a ed ff 00 96 20 93 8f 5f 9a bf 32 ff 00 e0 97 d6 ff 00 f0 92 fe d7 1a 86 a4 e3 72 cd 75 ab ea 5b 8f 7e 26 20 ff 00 e4 41 5f ac df d9 8b 6f a4 da a6 d5 c8 85 71 8e 49 f9 6b dc 96 29 c3 03 86 4b aa 93 fb ea 4d fe 56 3c 1c 3e 07 9f 19 88 a8 bb a5 f7 42 3f ad cf 3d be d2 42 ff 00 01 ac 7b ed 2c 37 fb de 98 af 42 d4 6c 17 6e 71 58 b7 fa 36 d4 c8 19 6f a5 14 f1 cd ad ce a9 65 c9 ee 8e 06 fb 48 2d fc 35 99 26 86 c6 e1 37 2a fd ff 00 4a ef 6e 74 2c ff 00 0e 2a 8b 68 d9 bb 41 b7 f8 eb 58 e3 99 87 f6 5c 53 d8 f8 cf f6 a4 b8 f0 47 87 be 06 fc 3e f0 ed cd c3 5e 78 93 e1 7b Data Ascii: k$c,z9?y9[Zm5?<k\| N _2ru[~& A_oqIk)KMV<>B?=B{,7BlnqX6oeH-5&7Jnt,hAX\SG>^x{
2024-10-30 02:47:36 UTC	12607	IN	Data Raw: 69 ed a8 52 a6 a1 4d 2d 15 9b 69 bf d5 2f c0 f2 df 88 77 7a 1e bb e2 c9 f5 28 fc 3b a7 db c3 70 8a 05 b6 93 6e 6d 6d 15 94 70 eb 12 f0 18 9e 4f 38 3e 82 b9 2d 77 52 fb 15 d3 32 e8 b7 76 91 e3 1b e6 b6 f9 87 39 e3 70 e3 35 ef b7 9e 29 d6 26 28 ad ab ea 51 ec 4d a3 12 0f cf a5 73 ba c6 ab ab 4a 3c c9 75 8d 4d 99 7a 06 94 3e ef cc 57 a3 ce fe d7 e7 ff 00 0e 79 f2 9c 65 74 a6 d7 a4 17 ff 00 24 8f 26 d0 fe 29 5d 5c bb 5a ea 57 d3 7f 63 ce af 04 91 85 27 c9 cf 2b 22 e0 67 e5 6e 71 dc 71 91 5f 51 ff 00 c1 2a 3f 6a 3d 1f e1 9c 9f 11 2c 75 cb e5 b7 bc d4 3e c7 76 b7 13 7f a9 9a d6 13 24 4f 8c 0c e4 3c c8 78 c6 46 4f 6a f1 f1 f1 0b c4 16 73 0c dd 5a b7 96 30 45 c5 94 52 03 ff 00 8e d6 2e ad f1 6b c4 9a 2e a3 0b 2d cd ae a1 70 c4 15 d3 ad b4 f4 4f 3e 37 1b 5d 5c 85 Data Ascii: iRM-i/wz(;pnmmpO8>-wR2v9p5)&(QMsJ<uMz>Wyet$&)]\ZWc'+"gnqq_Q*?j=,u>v$O<xFOjsZ0ER.k.-pO>7]\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	49754	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	414	OUT	GET /group/files/page/737/KHFH9.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:35 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/jpeg Content-Length: 17477 Connection: close Server: nginx Last-Modified: Tue, 03 Sep 2024 06:52:21 GMT ETag: "66d6b225-4445" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:35 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 56 00 00 00 00 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 33 31 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 03 00 01 00 00 00 40 01 00 00 03 a0 03 00 01 00 00 00 a8 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 ff e1 05 04 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 Data Ascii: JFIFExifII*(iV02310100@``http://ns.adobe.com/xap/1.0/<x:xmpmeta x
2024-10-30 02:47:35 UTC	1509	IN	Data Raw: bd af 1b 33 72 e7 5c 10 e8 5a 76 99 6e e3 7f da cc f3 1f ee a8 e8 07 d7 9a e9 8e b5 26 87 a6 47 72 f1 a5 c6 b1 7e be 6c 86 6e 76 46 4e 55 4e 3d 7a e2 bc f6 db ec 97 5a 85 b4 71 b3 16 4c 9b 82 54 0c 01 d8 1e fc 7e b5 a5 a8 6a 0d 7b 79 24 b2 f5 3c 01 d9 47 60 29 b6 c5 ca 8a fe 31 d5 ef 75 db 8b 6b ad 40 47 bd 54 a0 d8 a1 78 1c ff 00 53 5c f0 15 b5 75 24 53 c4 11 93 24 1c f0 70 45 50 16 82 43 8b 69 03 b7 f7 0f ca df 80 ef f8 66 8b 8d 59 68 55 ae 9f e1 e4 81 3c 4f 68 b9 ff 00 58 4c 64 0e d9 04 0f d7 15 80 d6 17 bf c3 6b 39 ff 00 80 1a d1 f0 ca 5d 5a eb 76 b3 35 b4 a8 22 91 58 bb 0c 28 c1 07 9c fd 28 1b d8 f7 48 b4 db 53 70 cd 79 6f e6 82 b8 ce 4e 47 d2 99 7f 6b 0c 10 ec d3 2d d9 4f 69 0b e1 bf fa df 97 e3 5b 9f 6d b1 9a da 19 63 9e 27 47 70 15 81 ce 72 33 8a Data Ascii: 3r\Zvn&Gr~lnvFNUN=zZqLT~j{y$<G`)1uk@GTxS\u$S$pEPCifYhU<OhXLdk9]Zv5"X((HSpyoNGk-Oi[mc'Gpr3
2024-10-30 02:47:35 UTC	425	IN	Data Raw: 5b 3b c3 63 9e df 2d 14 54 74 3a 2c 4a 96 b6 c7 ef 0b 80 7d b6 9f f0 a9 96 de c8 44 d2 01 72 76 ba a6 d2 a0 64 90 4f a9 e3 e5 3f a5 14 51 71 93 2f 92 84 08 ed 53 3e b2 31 7f e5 8a b5 0d e7 d9 65 b7 91 08 59 3c c5 18 50 14 63 3c f4 f6 f5 a2 8a 02 c7 73 78 43 48 8d bb 20 af d7 fa 71 52 d9 36 70 3a 51 45 57 53 9f a1 e7 9e 3f 24 78 a5 57 38 2d 1a 12 0f d4 d7 3f 7e 5a 09 d5 f2 68 a2 87 b9 ad 3d 8d a8 9f ce b7 46 5c 11 8a 64 05 59 1a 26 fc 01 fe 54 51 50 68 5c d2 1b 73 ac 59 3f c4 0f b7 15 d4 fc 28 88 1d 52 76 23 ee 47 80 7d 32 73 fd 28 a2 aa 1f 12 33 ab f0 b1 35 6b 93 2e a7 76 e4 9f 9a 56 3d 7d ea 86 0b 1e 28 a2 93 04 8d 0d 2e c6 c6 fe e1 6d 75 30 7c a7 53 b5 83 95 c1 eb d4 11 e8 69 35 0f 85 5a 3d c1 67 b2 bb b9 81 cf 23 32 6e 5f c8 f3 fa d1 45 6d 4d 26 8c 6a Data Ascii: [;c-Tt:,J}DrvdO?Qq/S>1eY<Pc<sxCH qR6p:QEWS?$xW8-?~Zh=F\dY&TQPh\sY?(Rv#G}2s(35k.vV=}(.mu0\|Si5Z=g#2n_EmM&j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49756	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	415	OUT	GET /group/files/page/737/HPNP05.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:35 UTC	842	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/png Content-Length: 130424 Connection: close Server: nginx Last-Modified: Fri, 26 Apr 2024 03:56:46 GMT ETag: "662b25fe-1fd78" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:35 UTC	15542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 a8 08 06 00 00 00 91 f0 37 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 f2 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 27 3e 0a 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 Data Ascii: PNGIHDR@7sRGBgAMAapHYs+iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'> <rdf:Description rdf:a
2024-10-30 02:47:35 UTC	1509	IN	Data Raw: a1 8b 03 48 bc 1c 8b c6 5a ec 4f 2a 71 0c 4f ea db e5 1c 56 78 58 35 e7 a0 41 13 03 e3 5a 80 2a 9f 16 e5 8b 09 df 19 cf af a6 65 c5 05 2e a1 48 a5 c0 1d f1 96 50 a9 2c 90 1b e7 c2 e6 f2 fd 0e dc 2d 21 dc d9 87 a8 b1 33 c4 75 25 6d db 81 f1 05 e0 39 06 c4 fe 42 4b 6a a1 ec ed 82 a8 55 a6 f0 b9 5d 37 cd 32 47 b0 7f 3f 0e df fa 2d 9a 3c 8c 45 b3 9b 4a 46 16 57 49 5a cf 0c 79 72 11 8f 2a f5 96 11 66 41 35 bc b6 0f 5a c8 c4 55 99 d3 0b c8 a7 8a c2 b6 88 30 81 f7 86 4a 33 53 62 00 55 70 53 70 a3 9e 40 e2 a4 01 29 d3 b4 83 77 07 90 a6 c3 51 de 6f e1 9e 6a f0 bc 9f de bc 25 52 81 9e e8 f2 4a 37 5e db c3 8b 1d f9 bd 14 fd 5d 81 2e d1 e4 19 5f ea fd 8d c1 13 da 06 fc 53 7f 1a 9f 7c 74 c6 46 60 c2 da 69 87 60 da 80 dc c4 b7 ff fc 21 8f ca 86 65 e7 73 4f 49 51 f9 07 Data Ascii: HZOqOVxX5AZe.HP,-!3u%m9BKjU]72G?-<EJFWIZyr*fA5ZU0J3SbUpSp@)wQoj%RJ7^]._S\|tF`i`!esOIQ
2024-10-30 02:47:35 UTC	16384	IN	Data Raw: e6 79 c9 53 f8 a4 f0 4e e5 ef fe d4 5f 2b d2 95 4f a4 2d 44 41 3b 2b b8 d2 d8 ec e6 2b 7c 28 02 38 c9 e4 7a 03 85 80 b2 bd d7 f6 71 b5 7b 28 41 b4 9d 2e ae c2 e2 ab 62 99 47 c1 e1 7e 32 3f 9e da c6 f8 c5 e8 cd ef 13 76 c0 78 7d 67 b5 97 ef 3a 28 5c 2a 19 97 03 ba f7 f0 30 d6 d7 57 63 6d a5 15 ab bd f2 61 9d 9d c3 7e ce 80 b7 fc 77 c2 0b 99 53 21 c7 db 14 e1 6e da 5a 8a 61 03 3e 10 66 1f 60 0e d6 a8 b4 32 e4 6d 01 8b cb ee 37 f3 dd e2 9a 8b 40 a8 4c 51 1a 27 3c 5b c2 d2 cf c6 ae ed a6 b7 d4 05 b7 e3 70 95 e8 64 10 3c bb 2a 0c e7 9a 82 7e f7 c1 05 59 3b 9d 55 ea 27 9c 49 5c ea a9 14 d8 6c 8b 2c 9e ab 70 48 5c 98 46 64 4a a0 93 b9 4b b3 1f 45 bf 7f 18 0f 1e ee c6 ce ae 73 0d 9d fb 64 98 ae 00 92 9e f2 2c 43 3c 27 e1 ac 17 a6 cb c2 c1 96 f7 1c 44 69 23 0d 9d Data Ascii: ySN_+O-DA;++\|(8zq{(A.bG~2?vx}g:(\0Wcma~wS!nZa>f`2m7@LQ'<[pd<~Y;U'I\l,pH\FdJKEsd,C<'Di#
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: 28 0f 38 f8 22 2d 5d ad c7 be 4b bf 03 61 db fc 54 a4 30 39 45 42 c1 36 93 7d 47 2b cb cb d9 06 f5 56 1e fd 79 e7 c8 9e 60 49 b7 53 28 bc 95 b4 38 f5 74 e1 23 e9 58 26 19 83 3f bc 20 e9 95 53 51 30 1e be e9 20 bf 2d 50 88 27 4b 7e 10 0b 2f 0a 6f 28 a7 ab 50 a2 9c a5 57 e6 c0 13 32 cb f5 42 dd 91 ca 62 36 3e c2 0b ea 43 ca 41 54 78 be 84 91 93 1a 8e a9 36 a1 67 af 8a 72 e4 a8 47 de f4 dd 57 10 2a 5d 66 86 ae 7d 64 00 82 19 0a 3a 9a 33 40 f9 b9 28 af 3d 5f 8e c8 0e 88 a0 a6 28 e2 99 3c ea 60 05 46 db c5 0d 0c 1f 33 84 af 68 c4 68 35 ae 94 c6 52 9a 9b d2 90 37 3d bf 24 24 6d 21 b4 cc 2f c0 91 de 68 75 3c 02 bf 18 d0 6a 65 98 e1 28 ea 37 69 6d ff 37 37 d3 83 f6 8d 98 01 1e fa c3 07 fb 78 76 3b 71 e7 ce fd d8 7d b8 ff 8e b2 4b c7 82 b2 9a c8 a6 2b 4a fb 6a 9d Data Ascii: (8"-]KaT09EB6}G+Vy`IS(8t#X&? SQ0 -P'K~/o(PW2Bb6>CATx6grGW*]f}d:3@(=_(<`F3hh5R7=$$m!/hu<je(7im77xv;q}K+Jj
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: 4f c9 5d ea 5d f8 ad 64 8c 94 c7 5a 8a 33 32 4a 40 f2 51 92 86 dc c8 37 3a bc 9f 1d 41 b2 d0 31 97 15 93 91 1a ce cd 3a 91 db 25 61 20 71 b9 95 1f 65 b0 b2 50 9e 5f 85 63 eb 01 2c f1 24 ba 89 05 bc 7f 74 06 f7 6a 61 5c f1 ef e1 42 f0 11 0e 5d 31 06 ea 65 5c 8a 6d 20 40 e9 ab f1 90 1c fd b8 ca fb 2e bc 32 8b e9 d9 28 25 73 1a ce 6d 92 87 52 8d ec d2 8a cd b4 0e 74 ea 50 8e 0e 51 b5 05 b0 1b fa 26 d6 1b e3 78 f4 c1 2a 9a d5 1e 2e ff d6 6f c0 e7 d9 a5 5a b0 e2 80 f5 6e b0 ed 5c 54 2a 2f 9d aa 63 2c dc 42 f5 e3 2d f6 5b 11 2f 7d f5 02 ee 74 e7 d1 af 0e 90 7b f0 0e a6 29 ed 4f 2d 9e 40 a6 ef 44 2b e0 c4 4a 6b 1a dd c8 04 ec 47 75 84 82 ac 5b ed 19 db 82 3e 51 ce c2 c9 f6 4b 67 6a 94 ba c4 9b fd 3c 03 7d 13 21 fa 41 2c ec c5 bd 65 02 e2 06 03 e1 fe 11 b0 dd c0 Data Ascii: O]]dZ32J@Q7:A1:%a qeP_c,$tja\B]1e\m @.2(%smRtPQ&x.oZn\T/c,B-[/}t{)O-@D+JkGu[>QKgj<}!A,e
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: dc 6d 92 8c 76 0c 27 5c 11 2c 32 d8 35 76 6d b8 f3 d7 ef c1 be ba 0f f7 72 11 c3 cd 23 2a 9e 02 da 07 07 e8 ec 3e 86 a3 49 19 4d 66 7e 62 7c 88 4a f9 08 83 f2 2e 5c 91 2e 3a 6c 87 5c d1 85 66 f1 19 1c 8e 09 aa 52 da 79 49 a3 ef 36 24 1d 54 67 0c 7a 83 d6 21 ac e5 0f 68 ab 16 68 c5 87 76 4f 15 8b 01 1c b1 1e a1 11 12 90 b0 1f 16 f6 d9 7e b9 8b d6 d3 7d b6 e1 11 7a 51 27 42 d7 67 f0 94 a0 5c 0a 53 e9 5c ba f0 dc 0f 0e 36 f6 d1 a0 f3 f4 ba 07 f8 52 bf 85 cf cf 5d c1 0b 67 16 31 e7 2e 61 c2 99 c0 e9 d4 59 d2 c5 43 78 4a 87 b8 b7 b5 82 17 92 15 fc bd af 38 70 e6 73 13 18 44 63 58 65 a5 de fb f8 10 57 2e 26 71 f2 ec 00 93 8e 2c be 77 6d 1f af 9f d8 c7 ab 33 07 b8 3c 5b 20 28 66 f1 f6 cd c7 b8 79 fb 97 08 14 56 91 9c bf 82 46 83 b2 ba ba 0e 5f ef 08 ad 66 01 7e Data Ascii: mv'\,25vmr#*>IMf~b\|J.\.:l\fRyI6$Tgz!hhvO~}zQ'Bg\S\6R]g1.aYCxJ8psDcXeW.&q,wm3<[ (fyVF_f~
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: 0e e9 4b 2c 7b 4f 09 f9 08 d4 d1 24 bc d6 20 72 e9 65 78 ed 5d 54 6a ec 0f 1f 25 f0 83 8f 7f 34 3c 2a d4 b1 bc ba 83 77 3e 7e 84 1b bf 7c 88 78 32 8a e9 94 0f 03 82 8e 8f 0f 3f 4f 90 fa fe 94 8f 8c 2a 08 af a2 5c b1 44 83 1e a2 ba 96 a3 5c f3 c0 73 3a 6a fa ae d8 71 c3 3d 62 43 71 3d 8b 5f cc 7d 0f 87 d6 1a 5e 7e fe 34 8d a6 41 8d bf 0b 6b 73 1d a3 ce 75 4c 27 d9 31 8c aa de 70 88 8d db 33 91 a1 dd b6 a0 d6 8d a0 d5 77 b2 81 ec 28 75 03 68 92 55 16 2b 76 34 ba 61 d4 88 05 1b 4b b7 b1 76 f7 2d b4 b4 cf 98 06 ea 24 30 39 e5 88 92 42 6e 1a 2b 3b 46 92 42 03 ee da 94 af 25 31 1a 6b 92 c1 4b 2e aa 57 05 08 ea 38 af 87 65 65 a3 2a 59 80 06 98 15 19 15 f9 24 3f 34 7e 2f 8f 92 0c 96 11 1a 6b 30 26 7f 0c 20 b9 5c 11 a5 07 1f c3 47 46 e5 a0 23 0b 50 b4 fe ce 42 47 Data Ascii: K,{O$ rex]Tj%4<w>~\|x2?O\D\s:jq=bCq=_}^~4AksuL'1p3w(uhU+v4aKv-$09Bn+;FB%1kK.W8ee*Y$?4~/k0& \GF#PBG
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: cf fe ec 8f c5 14 7d 96 8e 80 fa 59 5d d1 ae 0a bb 7f b0 b9 13 ff e6 df bd 99 e1 68 07 a0 fe d0 a5 c9 f8 de 0f cf 24 e0 15 03 f9 10 49 18 a7 a9 54 57 6e d7 e3 ca cd ed d8 6a aa cb a3 10 4c 97 9f ba e1 ee 0c 8d 1d 8c 36 72 73 8d 7b 09 66 33 33 55 23 b2 31 ff 36 92 d1 0d e0 08 fa ed d5 e8 ed ae c4 f0 51 8b f2 0e 33 bf d4 e5 ad e5 32 51 89 d1 0f 7a 93 75 c3 66 dc d0 d7 4d 51 0c 65 d7 01 f5 4d bc 40 03 c7 65 e2 b5 6c bc 48 3d 52 0b 00 19 fa 76 7e ba 1c 3f f8 3d cf 67 1e b1 e0 6f c4 e5 10 90 a4 f5 f6 7a 3b da 1b f7 e3 85 73 67 e2 fe cd bb b1 be be 06 30 1d 00 82 32 57 a3 3c fa 9c df 9e bd ec 06 1f e6 3c e6 2c bf cf 50 81 68 a3 ed 74 41 85 d1 5a 99 08 c7 71 4d d7 da e7 fc 03 7a 99 0f 52 ac 5c 2f b8 eb 20 65 9e aa 96 11 67 c6 3e fc 2e 86 36 94 2b 0e 1c 80 1d c4 Data Ascii: }Y]h$ITWnjL6rs{f33U#16Q32QzufMQeM@elH=Rv~?=goz;sg02W<<,PhtAZqMzR\/ eg>.6+
2024-10-30 02:47:36 UTC	15069	IN	Data Raw: af af c5 4b 67 8f 45 fd 83 57 e8 3b d7 e8 ab 0b ca 53 bd 40 77 71 fa 82 96 7a e5 f8 de e8 e8 38 f2 75 53 54 67 f7 3b 89 13 f6 01 56 94 fa 62 8a 4d a6 cb 70 af 11 83 b8 e1 44 67 86 ba a9 b1 c5 10 9f ff 3c e5 50 c6 2e 46 e5 86 08 7f f3 a7 9e 92 e5 e7 05 45 12 2c 2c c7 c1 7d 84 2f 1b b4 20 3b 44 36 68 de 8c 34 35 c1 12 90 d4 7b 3a 20 6f 47 69 20 fc 2f 0b 75 c6 92 22 d4 92 54 60 67 d0 90 1c 3a 0d a8 a0 90 83 a6 c2 e8 41 01 c0 1c 03 ec f4 72 26 d3 ca 7b 58 cd d8 c5 ef 8d b1 89 e9 70 75 42 2e 86 a6 6e 32 bc 2b d7 6e c7 3b 6f bf 89 b1 0f 10 02 a1 d0 48 48 a6 a4 a7 74 00 3a 53 76 1c dc 1f 36 27 d1 1d 21 f0 2c 18 5b d6 8f 7a 79 5f e6 31 52 77 c7 f3 3c 8c 26 13 9e ed 00 fe e5 84 09 cf 2c 12 2c 5d 21 e2 b8 22 f5 a2 25 1a 4d ae 54 b0 13 a0 eb db 84 c1 02 42 15 0a 7f Data Ascii: KgEW;S@wqz8uSTg;VbMpDg<P.FE,,}/ ;D6h45{: oGi /u"T`g:Ar&{XpuB.n2+n;oHHt:Sv6'!,[zy_1Rw<&,,]!"%MTB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49755	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	676	OUT	GET /group/files/page/737/HGKLN.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:35 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/jpeg Content-Length: 38918 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:58 GMT ETag: "65e6e616-9806" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:35 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 01 02 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 33 31 91 01 00 07 00 00 00 04 01 02 03 00 92 86 00 07 00 00 00 3a 00 00 00 c0 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 01 40 00 00 a0 03 00 03 00 00 00 01 00 f0 00 00 00 00 00 00 41 53 43 49 49 00 00 00 78 72 3a 64 3a 44 41 46 39 5a 32 74 56 4f 4f 59 3a 33 2c 6a 3a 39 35 32 39 Data Ascii: JFIF``ExifMM*V^(if``0231:0100@ASCIIxr:d:DAF9Z2tVOOY:3,j:9529
2024-10-30 02:47:35 UTC	1509	IN	Data Raw: c7 bf 11 74 f6 16 77 56 73 7f 6a f8 ba c7 ec fa 2c d2 c7 35 c2 c8 3e 43 3c 68 60 07 e4 08 0a b6 78 0b f2 9f 9a bd 73 f6 2e b5 f8 61 e2 ff 00 81 36 77 1f 11 be 19 f8 27 47 f0 ae 87 67 2e ac 35 ed 2e d2 e2 de ea 20 26 91 21 8d ae 12 74 99 e4 92 68 e6 c4 31 b1 09 1e d2 76 00 99 fd 2c fd 8e fe 35 f8 47 5e d2 2d 7f e1 5c ea d6 33 78 65 a6 82 33 b7 54 9a 46 8e 57 c3 11 2a dc 42 24 f3 da 29 19 d9 83 bb 6d da 71 8c 1a f8 9e 2c c5 cb d8 49 52 5b 77 b1 d3 4b 09 2a ce f3 f8 3e 67 99 ff 00 c1 0f 3e 02 f8 b9 3e 0b eb de 13 f8 99 e1 7b 16 d4 74 59 a7 9f 44 d5 ef 59 6e 7c f4 bc 84 c7 70 80 a9 cb 46 a2 dd 41 00 e0 ac 80 0f 9a 21 9e b3 c6 5f f0 48 bd 4b 5d f1 b6 82 3c 45 aa 37 88 bc 2f a1 3c b7 09 05 b3 1d 2e 14 f3 a5 56 9c 94 87 74 92 93 2b 34 c8 ac e3 6f 94 40 d8 40 79 Data Ascii: twVsj,5>C<h`xs.a6w'Gg.5. &!th1v,5G^-\3xe3TFWB$)mq,IR[wK>g>>{tYDYn\|pFA!_HK]<E7/<.Vt+4o@@y
2024-10-30 02:47:35 UTC	16384	IN	Data Raw: bf d8 a3 b8 9e 4d d0 ea 91 6d 75 da e7 38 41 b0 a4 7b 4f cb fb bc e7 e6 af bc 3f 61 cf 03 78 7f e2 3f c4 6d 37 c5 fa 56 8f e1 1d 62 19 b5 3b 3b 9d 62 e1 16 e9 6c 7c 24 e5 0a c3 1c 10 79 ff 00 6a 96 79 a7 f3 32 c1 b6 83 14 67 ee b0 ac f1 2a a5 1a b7 8b f7 bb 9a 53 c6 51 a7 86 95 39 c7 4e 9d 9f cc fb 23 50 f8 53 a8 ff 00 c1 51 3e 0e 4f e3 0f 0a c9 79 e1 9f 1f 78 57 54 3a 72 cd 34 f2 ac 97 d6 e2 18 dc a3 e3 82 7c c6 61 bb d0 1a f9 f7 f6 83 fd 83 7e 35 7c 31 f8 0d 62 ba 16 8f aa 5e 6b ba 96 b2 d0 6a f6 56 d3 19 16 fe 25 cf d9 ee a1 85 23 40 32 7e d0 87 ed 25 7c a5 8f 72 e4 33 91 fa fd f0 d3 4f 93 46 f0 c4 36 47 fb 1e 35 89 04 09 2d bf df 96 30 b8 66 76 20 05 c9 04 6d 1e 63 53 6e 7e 21 5b e9 37 4d 66 d7 de 75 d4 0e 92 b1 77 8d 8b 0e 78 5f 5f bc 3f ef b3 5e 4e Data Ascii: Mmu8A{O?ax?m7Vb;;bl\|$yjy2g*SQ9N#PSQ>OyxWT:r4\|a~5\|1b^kjV%#@2~%\|r3OF6G5-0fv mcSn~![7Mfuwx__?^N
2024-10-30 02:47:35 UTC	5482	IN	Data Raw: 36 b4 61 55 09 6c 56 2f c1 ef f8 29 0f 89 be 0c fc 40 8b c0 da b5 ee 9b 1d ce b5 7b 1b 8d 25 c4 da 87 f6 53 37 98 f2 2c 97 81 8b 4e f1 38 87 73 a4 67 cb 75 62 1e 40 0d 7d 05 27 ed e0 3c 3d af de 59 f8 6f 5c d1 35 48 75 0b 17 ba 97 4e bb 9b ca d4 45 cb 21 3f 65 74 f9 30 ee d9 1b 24 00 a9 c8 c7 cc f8 f1 f1 19 ee 36 bc 6d 28 b8 f3 6e d6 b6 2e 9e 51 42 8c 93 bd d2 e8 ca 5e 06 ff 00 82 7c 78 3b e1 8d c5 d2 fc 3b 86 e3 c0 3e 22 bc b7 33 b4 33 6a b3 de 40 f1 c2 ec a2 37 57 69 59 10 ac c0 b7 92 ea 70 b1 7a 1a ed 6f f5 cd 27 c3 5f 0f 35 0b 1d 73 c7 0b 6f a8 5c 40 15 e1 b0 b3 78 6d fe d0 71 b2 54 c3 99 8b 2e d5 cc 81 b2 9b 4e e0 33 5f 11 f8 9f f6 af d5 be 1f fc 4a bd d5 fc 51 e2 9b af 0e d8 5c 59 5a 9f 2f fb 39 85 f6 97 21 06 51 08 8a 4f 28 48 cc b1 a8 2c 5e 31 c8 Data Ascii: 6aUlV/)@{%S7,N8sgub@}'<=Yo\5HuNE!?et0$6m(n.QB^\|x;;>"33j@7WiYpzo'_5so\@xmqT.N3_JQ\YZ/9!QO(H,^1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49759	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	673	OUT	GET /group/files/page/737/HP.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:35 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/png Content-Length: 16661 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:47 GMT ETag: "65dc1ac3-4115" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:35 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 64 08 06 00 00 00 4e eb 38 5f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 27 88 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f Data Ascii: PNGIHDRdN8_sRGBgAMAapHYs+'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/
2024-10-30 02:47:36 UTC	8557	IN	Data Raw: 30 30 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 37 35 25 20 41 7a 75 72 65 20 43 3d 36 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 63 79 61 6e 3d 22 36 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 79 65 6c 6c 6f 77 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 62 6c 61 63 6b 3d 22 30 2e 30 30 30 30 30 30 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 35 30 25 20 41 7a 75 72 65 20 43 3d 34 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 Data Ascii: 00"/> <rdf:li xmpG:swatchName="75% Azure C=60" xmpG:mode="CMYK" xmpG:type="PROCESS" xmpG:cyan="60.000000" xmpG:magenta="0.000000" xmpG:yellow="0.000000" xmpG:black="0.000000"/> <rdf:li xmpG:swatchName="50% Azure C=40" xmpG:mode="CMYK" xmpG:type="PROCESS"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49760	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	413	OUT	GET /group/files/page/737/HPRC.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:36 UTC	842	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/png Content-Length: 122913 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:58 GMT ETag: "65e6e616-1e021" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	15542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 00 a7 08 06 00 00 00 60 a6 85 24 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 3b 74 45 58 74 43 6f 6d 6d 65 6e 74 00 78 72 3a 64 3a 44 41 46 39 59 5f 62 66 59 62 30 3a 32 2c 6a 3a 31 32 30 38 35 30 39 39 33 39 33 34 31 39 37 39 34 34 31 2c 74 3a 32 34 30 32 32 31 30 33 e6 ab 05 c6 00 00 04 e7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 27 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 27 3e 0a 20 20 20 20 20 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 27 68 74 74 70 3a 2f Data Ascii: PNGIHDR@`$sRGBgAMAapHYs+;tEXtCommentxr:d:DAF9Y_bfYb0:2,j:1208509939341979441,t:24022103iTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x='adobe:ns:meta/'> <rdf:RDF xmlns:rdf='http:/
2024-10-30 02:47:36 UTC	1509	IN	Data Raw: d5 9e 99 7a 8c 6c 6e 13 6d d1 2a b6 f3 c0 83 85 06 ae de 5d 41 a4 a9 15 09 02 4b 25 94 41 a2 ff 08 1e cd 3c c1 e5 77 3e c0 e6 93 bb e8 08 ad a1 25 9d 66 df b6 61 91 a0 9d 4c 34 61 f0 70 1f 12 c1 16 94 4b 25 24 93 69 82 4f 0b fb 1c 2c cb 86 3d fd d5 d1 f6 92 34 66 ae dc 40 6b 69 03 e5 7c 11 65 1d ad 4f f5 ba 48 80 d4 b1 58 7a 63 64 a7 a7 0f 97 58 c6 06 07 65 2b 25 60 0d 0a 49 6e 61 f2 55 9d 8c 28 e1 22 da 28 21 9a dd c6 0e c1 38 10 8e 52 02 d6 ab 7b 49 7b 77 58 7c 26 15 59 79 96 d8 b6 da 40 2f 66 15 4f 35 f4 44 9a 61 74 92 5b 69 f4 43 87 98 5f 6b 7b 36 58 74 29 82 8d 3a 2f a2 e7 16 78 ed 82 12 07 98 e2 da a0 d5 b0 60 19 7f 12 54 bd 81 e2 86 cd 2e 78 1a 3d 85 d1 cf c0 4f 34 2d 82 1b 64 32 fb a5 0d 4b 43 e3 4b 9f 12 28 64 95 bf a5 e7 9f bd 76 46 4f 7f e0 8a Data Ascii: zlnm*]AK%A<w>%faL4apK%$iO,=4f@ki\|eOHXzcdXe+%`InaU("(!8R{I{wX\|&Yy@/fO5Dat[iC_k{6Xt):/x`T.x=O4-d2KCK(dvFO
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: 2d dd fd b8 72 6b 0e 6f be 7d 15 b5 f9 47 18 c0 26 da 33 09 6c b3 dd b5 06 57 a9 94 91 ce 34 d9 5e 50 8a 77 88 26 a2 68 21 80 af 3c bc 47 55 bc 82 18 d5 67 8d 0b 8d 17 3b 8d 27 11 67 df 95 b1 1d 48 a1 d6 d4 84 ce be 6e dc bc 3b 89 f6 28 79 c4 d8 88 03 85 bc 20 0d c3 54 63 31 2a 07 51 20 47 a9 af b9 cb d6 90 d2 f1 18 ca 85 02 72 3a d6 8c bc 44 85 02 9b d4 1c 06 7a bb 59 15 37 12 0d d4 34 88 c9 b8 b2 9b e4 b7 8f 99 ed d8 30 e5 23 fa cc c7 e2 2b ae 1f 6e 97 58 da dd cd 6a bf ce 98 14 68 01 1f 8f af 4b b4 2c 8e fc bc bb 73 db cd cc 5e 18 2f de 8d a7 fd 78 f2 b1 00 5e 6c 07 01 99 da d0 22 7a c6 5e 2f 33 4f d9 99 9a 71 e5 74 54 9d 9f fe 2c 1f 5e 82 3a 07 34 2e 91 2f a1 c9 65 f1 bc 34 86 86 72 fb 79 d1 6b d7 ee 19 97 86 fe 92 12 65 d3 ff 3e 90 94 71 a5 b1 58 06 Data Ascii: -rko}G&3lW4^Pw&h!<GUg;'gHn;(y Tc1*Q Gr:DzY740#+nXjhK,s^/x^l"z^/3OqtT,^:4./e4ryke>qX
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: 81 9b 2e cb 87 e9 48 99 76 ff b2 d2 99 9d bf 5e a1 f5 af 72 b9 38 ea 40 c5 73 41 ae 9c d6 d6 fc e3 64 64 6d ac 36 91 51 db db ac 27 07 55 2b ad f3 99 ea 40 fd 2e 4e a0 6a a1 34 d3 d5 d5 89 ce ce 0e 4a 7c 29 9b a5 b5 55 66 8b 80 a8 07 22 9a e1 f5 8d e1 96 f6 56 db e2 a0 7d 89 0b f3 b3 58 5a 58 b0 8f 3a 29 17 6d f6 d5 7e 44 31 6f 9a 2a f4 d8 f8 28 ce 9d 39 89 93 27 8e a0 5b e7 13 92 39 97 96 d7 ec 2d 18 7f fb 82 a4 0a 6d fe ee 68 6f 47 9d 2a a7 11 62 85 f4 7d e5 4a 20 81 32 55 58 7d 9f 59 5b 1a ee ad 52 8d 27 bf 9f 3f 7b 0c 4d 54 45 1f 3f 7e 82 6a 24 84 22 c1 27 12 cd e0 16 55 71 b6 28 55 db 28 96 73 35 e4 f5 94 9b e9 8e 0e 74 22 c7 41 76 6b 72 d1 d6 60 f5 0a e0 f1 e1 4e ac ac e7 b1 5e ae e2 70 22 8c 1c f9 32 3d 7a 10 1b 57 bf 8d 96 18 d5 e6 b2 94 74 82 8d Data Ascii: .Hv^r8@sAddm6Q'U+@.Nj4J\|)Uf"V}XZX:)m~D1o(9'[9-mhoGb}J 2UX}Y[R'?{MTE?~j$"'Uq(U(s5t"Avkr`N^p"2=zWt
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: aa 81 cb 4b f2 53 2d e0 17 a5 6f 53 21 d5 aa c9 9d 82 56 76 f3 ca ec d5 61 59 23 ea e8 c8 2a 43 88 ef 79 b0 7e 5e 38 37 ab 03 cf 89 b6 63 d7 31 27 6c 13 49 7b 32 0e 80 b2 a7 00 ab 56 d2 73 47 88 07 4c 7b fa e2 48 e9 1e d1 0b 4f 42 3e cd 7d a3 da 19 18 53 3d 86 2e 71 10 52 d7 90 eb d2 cd 6b ea 03 8c 3b 0b 44 67 66 d2 00 54 a9 6b 80 50 ba a2 e5 25 9c d4 ec 7c 8c f3 f3 e0 e7 95 89 7b ea 2b b4 aa af 98 49 a2 3d f2 b4 50 97 16 4b b5 18 03 ea aa 0d 47 1b da 60 b9 fb 13 9a ce 17 8f 39 3d 3d e0 69 6d dc e7 31 80 9c f3 e0 e9 99 a9 05 cd cf ce f0 ac 55 6d 6f 6e a8 0e 08 d7 33 30 e1 2d 69 6a a9 a4 8d fa 2e 6c 78 4b 4d ff dd ff e1 af 73 0b 48 cf 43 0f 18 54 b4 21 f9 05 78 44 18 c6 6f e1 b9 a3 f2 c9 80 ff f3 cf ce ac 0d 68 ff cf d9 4b 3e 71 41 fc 23 d3 c9 cd 98 0a 6f Data Ascii: KS-oS!VvaY#*Cy~^87c1'lI{2VsGL{HOB>}S=.qRk;DgfTkP%\|{+I=PKG`9==im1Umon30-ij.lxKMsHCT!xDohK>qA#o
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: d6 56 9b 45 ab bc 4d 61 19 4a dd 20 dd 2d 2a 75 1b 0f 1d 6d 54 3c d3 f3 09 1d fa ec d9 30 79 b8 f7 12 4d f3 7b 79 75 51 f5 0a 5e 80 3f 47 dc 86 d2 a8 2c d7 3f cf 4d c7 5c 55 40 94 82 b6 23 44 ef 93 52 21 c4 f7 fe a8 99 42 51 1b 99 5e b5 b7 40 db 9b f2 ea f3 b4 9f ad 4a ac d8 a1 f2 42 b4 b1 99 35 ba 9d d3 15 ef 7c 58 86 a6 b7 36 c2 18 8c ca f7 32 bf cf ac 6c ea c9 63 87 b4 d9 da ae f6 c6 2a 46 b6 ae 52 df 53 ea df 30 b3 f0 f2 3e bb c9 74 25 5e 06 cf 64 1e 2b c6 6c 16 c2 e7 c9 55 87 c9 28 b2 cb 80 82 b7 02 4a f5 ee 7e 9c 88 81 0e 19 90 0f cf 04 f0 5a 85 cd c8 3b 4b fe dd 8c 91 4f b7 aa 3b 07 06 3a e4 b4 52 a2 84 2e 7a 0c c7 e0 5e 4f 87 0c f0 13 51 01 f2 f6 02 09 5e fd da 8b 04 d8 98 dc ee 68 c0 68 6b cd 63 4b 09 eb 4b c1 b0 9a da dc 8b 48 d9 2b 0b da 29 4d Data Ascii: VEMaJ -umT<0yM{yuQ^?G,?M\U@#DR!BQ^@JB5\|X62lcFRS0>t%^d+lU(J~Z;KO;:R.z^OQ^hhkcKKH+)M
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: 15 ca eb 21 73 85 42 17 75 55 47 f6 5d 11 59 7a 34 86 89 94 47 89 a4 9b d3 98 13 f9 cb 17 9a de ec 84 1d e4 f3 45 62 f6 01 9b 8f 86 8b 45 14 62 4f 1f 5d bb ac 8b 77 6e 28 4b c8 d8 d6 06 fa b7 67 d4 9e cf 47 cf 4d 2c 82 49 e1 f3 b0 b3 ed a6 6d 7d 08 1b f8 a3 77 3f d5 0d 57 3e 61 53 34 de a2 2c a3 84 2d f9 f4 96 66 2e 5e 57 3b f4 d4 4c ca 6d 62 6e 18 b7 81 1b cc 02 60 00 41 6f bc 7c f0 4a c6 f5 c4 07 ae f5 32 e1 db 9a ab 36 69 e4 e4 f1 48 bb 2d 5d 20 8f 6e a7 20 54 e7 6f e1 ee 35 fd fe fb 0f 35 57 de d6 26 9e 69 b1 5c 81 c9 49 55 0a 3a 88 e1 b4 e3 79 79 1c 54 da 82 46 c1 f9 92 d0 73 8c 1a 10 4d da 3b 60 80 be 86 f4 47 4e bb 77 0d e5 4f 7b 77 ae 84 96 bb 52 dc 00 5b 84 0d b4 ed 35 f4 d6 6d 42 b6 1a 80 4a 8d d5 11 b8 27 e4 1f ea ca e9 d4 10 ac d1 d5 09 ab 9a Data Ascii: !sBuUG]Yz4GEbEbO]wn(KgGM,Im}w?W>aS4,-f.^W;Lmbn`Ao\|J26iH-] n To55W&i\IU:yyTFsM;`GNwO{wR[5mBJ'
2024-10-30 02:47:36 UTC	16384	IN	Data Raw: 73 48 68 66 da 42 cf 16 4f 16 be cc bf d8 c8 76 3b b8 bc ec 18 3f 38 a6 62 da c1 a2 a5 de a5 8e 36 b1 da 3f 48 e8 69 d4 df 8b 81 2a 3c 7c a7 d9 39 6b c0 a9 80 65 ea 78 f3 f2 68 4c e0 d5 09 cc 1d 84 24 e3 d3 57 62 77 ab 58 60 01 a6 52 67 e8 00 e1 72 c3 27 ea 60 88 df 29 1d 34 14 bb 9b b1 f9 fc 61 0c 4f cd 00 a0 28 cf f2 c3 18 7d f7 97 00 5b ea 84 e1 cb 5e 3d 40 ba 93 e7 d5 e0 f9 77 be f9 bb f1 f6 57 01 a6 e1 51 ca 3b 21 6c da cd de d3 0f de ff 28 6e ff e9 77 08 03 6f c6 60 bd 37 0e 9a ae a6 d2 19 83 53 13 f1 bd df fb a3 dc a5 cf 61 36 73 ab db d1 3c 38 8d 71 7e 97 8f 5a 51 2d 77 e5 12 53 3b d0 6c b3 ad 14 ab 6b 9b d9 fe 01 cc 40 7d 62 2c 3a ab 35 40 c2 99 48 0e 64 ee 8f 4f 7e f0 61 7c f5 97 ff 5c f2 d6 70 d1 54 88 c0 97 06 0f 82 cb df 94 35 be 9b ae f0 05 Data Ascii: sHhfBOv;?8b6?Hi*<\|9kexhL$WbwX`Rgr'`)4aO(}[^=@wWQ;!l(nwo`7Sa6s<8q~ZQ-wS;lk@}b,:5@HdO~a\|\pT5
2024-10-30 02:47:36 UTC	7558	IN	Data Raw: c4 29 d8 41 9e 89 1a e6 17 0a ef 87 c7 e5 0c 24 00 d1 b0 d3 55 b3 5d d8 d7 e1 50 bd 00 64 a7 db be 22 a3 39 6f 9e 8a c9 1b 88 5e 78 4d 7a 8d b4 25 c1 27 eb 6c 23 00 60 87 4a 25 cf fd 0d b0 9f f1 eb fc e5 a5 88 46 02 88 e1 a3 de a7 bd e9 be e4 a9 b9 43 c1 5e f0 96 87 9b 1b 1b 71 ff c9 6c dc 7d 32 07 6e 1c c5 cc a5 8b 31 33 3d 19 c3 43 7d e8 4c 29 ba 90 3d 81 15 96 f2 c8 02 cc 92 ff 59 a0 65 39 dc 46 b0 d3 1b 33 64 75 04 8a 83 37 8a b1 91 59 67 53 0c f0 28 07 9f 23 13 b6 c7 89 11 c5 4c 94 c2 f8 78 5d d1 99 51 bc 52 3f ce 5e 29 b5 c8 e1 91 00 08 86 9d cb 9f ef 73 d9 4c 00 fc 87 7f f7 3f 22 6a c2 f5 a4 22 b9 ec 0e 8d 17 04 8a dc 8f f3 12 b1 0c b8 c6 8d ed ed d8 e2 dd d8 de 8d 4d 94 7c 1f a0 73 a8 cb 46 43 6f a9 14 63 fd 35 3c a4 7a 0c 0d 39 35 a7 33 ea b5 82 Data Ascii: )A$U]Pd"9o^xMz%'l#`J%FC^ql}2n13=C}L)=Ye9F3du7YgS(#Lx]QR?^)sL?"j"M\|sFCoc5<z953

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	49761	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	676	OUT	GET /group/files/page/737/HPME9.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:36 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/jpeg Content-Length: 18715 Connection: close Server: nginx Last-Modified: Tue, 03 Sep 2024 06:52:23 GMT ETag: "66d6b227-491b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 56 00 00 00 00 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 33 31 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 03 00 01 00 00 00 40 01 00 00 03 a0 03 00 01 00 00 00 a8 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 ff e1 05 04 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 Data Ascii: JFIFExifII*(iV02310100@``http://ns.adobe.com/xap/1.0/<x:xmpmeta x
2024-10-30 02:47:36 UTC	1509	IN	Data Raw: e2 35 92 19 12 68 8f 49 23 60 41 fc 45 79 c7 c5 8d 56 41 35 a6 98 8e c2 2d 9e 74 8b fd e3 92 17 3f 4c 1f ce b3 3e 1b eb 72 59 eb 71 59 3b 8f b3 5d 9f 2f 69 3c 07 3f 74 8f 7c e0 7e 35 bd 39 24 ec 44 a9 b7 1e 63 d5 75 08 10 c6 3c b0 49 24 12 4d 71 1e 24 86 c9 5a 48 ee 42 48 aa c4 80 47 35 d9 cf 69 73 3b 7c e0 81 d3 9e 05 72 5e 24 d0 e7 9e 70 8a c1 94 0e 76 9c 8a e9 9a ba d8 c2 0f 5d cf 09 b3 7f 3f 50 b8 9c a9 4c 3b 8d 84 63 69 27 a6 2b 5b c3 ba 73 6a fa 84 b6 31 4c b0 ca 58 4f 1b 38 c8 3b 73 91 fa e7 f0 ad ed 5f c1 d7 26 ea 56 b1 be 96 0c fc ce a2 24 60 cd 8f 56 07 9c 0a e4 ac 1e 7d 3b 56 1e 55 c3 99 e2 91 90 4b 80 09 3c 8e c3 1e d5 cd a4 6c 74 7c 57 3d 0b e2 e7 89 ee 35 9f 09 43 e1 c3 a5 bc 3a 94 6f 1b c1 74 b2 6f e5 58 13 b7 0b 9e 6b 91 d3 3c 6d a8 48 5e Data Ascii: 5hI#`AEyVA5-t?L>rYqY;]/i<?t\|~59$Dcu<I$Mq$ZHBHG5is;\|r^$pv]?PL;ci'+[sj1LXO8;s_&V$`V};VUK<lt\|W=5C:otoXk<mH^
2024-10-30 02:47:36 UTC	1663	IN	Data Raw: 27 d5 75 3b 7b 18 a4 48 5e 66 da 1e 4e 83 82 79 fc ab d6 35 6f 03 c5 e0 bf 0d ff 00 6a 5e 5b c3 7f a8 59 cf 6e cf 13 b9 f2 a5 fd e3 92 be 98 65 da 0f 07 18 35 95 2a 7c d7 b1 bc ea 46 9d 97 56 70 09 61 7f 05 8c 7a b4 49 2c 36 e2 5d 89 70 a7 69 de 39 e0 f5 e3 d4 74 c8 f5 ae e3 c2 9f 15 6f 74 f7 48 75 e8 be db 6f f7 7c f5 c0 95 47 bf 66 fd 0f b9 ae 83 fe 13 ab 9f 15 78 57 59 8a cb 4a 96 da 01 09 59 11 9d 64 01 b9 21 50 0c 60 74 ed da bc 55 90 e4 e3 9c 73 5a 54 a6 a1 6b 3b 91 4e 5e d5 3e 65 6b 1d f7 8c 75 bb 6d 73 c4 37 17 b6 52 17 b5 65 45 8c 91 82 00 51 9e be f9 a5 f0 80 32 78 93 4b 00 16 c5 d4 4d c7 b3 03 fd 2b 85 b6 95 a3 60 50 f3 5d f7 c3 3b 84 1e 25 b3 79 e2 94 05 62 03 46 bb 80 24 10 2b 25 49 b9 5d 15 36 a3 1b 1e fd 3b bc a5 72 30 7a 0c 74 15 9f aa 08 Data Ascii: 'u;{H^fNy5oj^[Yne5*\|FVpazI,6]pi9totHuo\|GfxWYJYd!P`tUsZTk;N^>ekums7ReEQ2xKM+`P];%ybF$+%I]6;r0zt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	49762	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:35 UTC	410	OUT	GET /images/weather-icon/60.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:36 UTC	838	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:35 GMT Content-Type: image/png Content-Length: 2898 Connection: close Server: nginx Last-Modified: Thu, 25 May 2023 15:33:43 GMT ETag: "646f7fd7-b52" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	2898	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 33 20 37 39 2e 31 36 34 35 32 37 2c 20 32 30 32 30 2f 31 30 2f 31 35 2d 31 37 3a 34 38 3a 33 32 20 20 Data Ascii: PNGIHDRxxtEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c003 79.164527, 2020/10/15-17:48:32

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:36 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:36 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024736Z-16849878b78fhxrnedubv5byks00000005ug000000003vus x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:36 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:36 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024736Z-16849878b7898p5f6vryaqvp580000000890000000008vvv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:36 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:36 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024736Z-16849878b78bjkl8dpep89pbgg000000067g0000000001yn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:36 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:36 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 2b09286a-a01e-003d-7487-2998d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024736Z-17c5cb586f672xmrz843mf85fn00000006b00000000036zq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.7	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:36 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:36 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: a3cdd038-101e-0046-1366-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024736Z-15b8d89586fzhrwgk23ex2bvhw0000000acg000000006ge9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:36 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	49763	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	414	OUT	GET /group/files/page/737/HP8D9.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:37 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/jpeg Content-Length: 32499 Connection: close Server: nginx Last-Modified: Sun, 15 Sep 2024 16:00:56 GMT ETag: "66e704b8-7ef3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:37 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 06 90 00 00 07 00 00 00 04 30 32 33 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 01 40 00 00 a0 03 00 03 00 00 00 01 00 f0 00 00 00 00 00 00 00 00 ff e1 05 08 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 Data Ascii: JFIF``ExifMM*V^(if``02310100@http://ns.adobe.com/xap/1.0/<x:xmpmeta
2024-10-30 02:47:37 UTC	10458	IN	Data Raw: 9f ed 10 59 5c 3d ac 52 18 dc 87 67 33 6f 07 91 f2 ef c5 75 de 3b fd b4 7e 1c ea 7e 15 b0 8f 58 f0 66 a5 0b 5e 09 23 02 d3 52 96 26 89 98 c6 0e 51 cb 83 f2 91 f7 ab 5c 0e 16 a6 5f 57 da cd af 86 c6 59 85 67 98 d2 f6 50 83 b7 35 f4 3d 36 eb c0 0b 17 c3 7d 73 47 9f 50 9f 45 d4 da 4d 4a 4d 3a e5 54 39 8d e5 ba b8 92 09 37 02 36 b0 57 53 c7 af a8 35 e5 f7 de 01 f0 c7 c1 ed 3b fb 43 c5 fe 24 f8 a5 af 69 f2 4c b6 d1 69 63 57 cd a9 95 86 e6 f2 8d bc 22 64 cc 89 24 d9 95 c0 de cd ea 33 f4 00 bf d4 2d a7 91 9b 16 33 0f e0 82 e1 99 3f f4 14 af 23 fd bd 3e 28 da fc 1d fd 9b 34 cf 16 ea 17 5e 1d b3 8e d7 58 8e 49 a3 bd b7 3b af a2 2a d1 f9 50 18 f6 6e 97 6b 16 c9 af 52 39 9b af 39 d0 a2 93 b6 d7 fd 0f 9f 86 11 61 94 27 fc db f9 1e f7 e0 7f 15 69 de 1b d2 be cb 65 67 Data Ascii: Y\=Rg3ou;~~Xf^#R&Q\_WYgP5=6}sGPEMJM:T976WS5;C$iLicW"d$3-3?#>(4^XI;*PnkR99a'ieg
2024-10-30 02:47:37 UTC	6498	IN	Data Raw: 19 43 16 da 43 12 07 ca 70 2b cf 7e 23 f8 43 c0 fa de 97 79 16 ac ba 0e 5a ce 43 65 70 b2 c5 65 79 e6 c6 32 2d c6 dd bb 95 c3 e4 11 f3 26 07 5a a8 54 9a 31 e4 4d 73 45 58 e5 2e fe 17 c3 f0 7f e0 9f 8e 34 9f 0e df 6a 50 d8 dd 5a 6b 1a b3 9b b7 86 e2 26 96 e1 27 69 e3 68 ca 87 88 92 cc 23 90 64 12 14 30 05 94 1f 3d fd 8d 7e 3c ea 9e 14 fd 8d 7e 1d 9b 8f ed 6d 43 c3 f6 f0 dc d9 df 44 cd 02 dc 24 7f 68 0d 0b 44 0a f9 8d 1a 6d 51 f7 be f4 51 9e 87 29 b7 75 e0 db e4 f0 4e b0 b6 da 2e 8b a8 49 a7 45 7b a7 d9 ef b0 86 3b ad 5e de 45 53 15 c6 54 22 34 8a 54 a6 18 80 44 8c c3 24 0a 9b f6 69 b7 b3 b3 fd 9d 7c 03 a1 6a 5a e4 ba 4c da 6e 93 14 53 69 73 a8 b6 b8 8a 42 77 32 07 00 ee 00 f5 04 c4 47 7a f7 68 63 25 ec 64 aa 3b b9 6e 72 56 c1 c7 9a e9 1e c9 f0 03 56 d1 7f Data Ascii: CCp+~#CyZCepey2-&ZT1MsEX.4jPZk&'ih#d0=~<~mCD$hDmQQ)uN.IE{;^EST"4TD$i\|jZLnSisBw2Gzhc%d;nrVV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49778	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	446	OUT	GET /group/files/website/9/5e0d1617-e33e-4602-9a72-77c72342a239.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/png Content-Length: 13398 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:21 GMT ETag: "646e896d-3456" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c2 00 00 01 2c 08 06 00 00 00 50 56 b3 b7 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 7f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDR,PVtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53
2024-10-30 02:47:38 UTC	5294	IN	Data Raw: fa 6e a4 ae c5 66 f9 db 7c 77 8f 9a 3a f9 fe 54 44 59 4c 15 f4 be 1e bd b5 f3 73 9a e5 e7 d1 cd df 9e 3b 7b d4 b1 63 11 fb fa d8 f7 f7 83 bf 59 4f f7 6b ee ea 11 82 ce 71 b6 69 53 4f 93 42 9c e3 d1 64 1b 2f 52 0c 7e ad ed fd 3a db fa be 75 2c d5 6c bd 35 c7 7e 7a 79 84 bb aa 5f e3 34 8f 12 14 a1 ad 50 e4 3d ec eb d7 37 db cf 61 ba df c7 4e 7e 0e 71 64 af 8a 23 6a 8b a7 4a 3b 0f b8 be a9 41 be 1a e0 c5 ac 2a d6 5c 29 b5 6c bc 5f e7 22 51 b4 f8 86 9f 8b 06 0c 1e 55 c3 fc be 84 47 c1 7b 87 b9 bb 87 cb 86 d2 f4 65 3f af eb 3c ff 54 82 be 31 5e ea f9 24 d3 06 f3 7b cf 47 9d a3 bc a8 fb 74 52 48 86 10 cb 86 2a 25 3d e4 51 fc 64 ff bb e8 ee f7 9c 5a fa 0d 0a 46 d8 d8 c5 d6 b3 8b b9 87 ae d9 55 d8 57 db 50 5c b3 85 05 fc 81 de 54 a5 7d 55 f3 dc 8a 5d af 98 75 b3 Data Ascii: nf\|w:TDYLs;{cYOkqiSOBd/R~:u,l5~zy_4P=7aN~qd#jJ;A\)l_"QUG{e?<T1^${GtRH%=QdZFUWP\T}U]u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49774	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	676	OUT	GET /group/files/page/737/HALEX.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/png Content-Length: 18093 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:47 GMT ETag: "65dc1ac3-46ad" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	15544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 50 00 00 00 64 08 06 00 00 00 d0 74 68 d6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 2e 7a 54 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 00 08 99 33 32 30 32 d2 35 34 d0 35 30 0f 31 b0 b4 32 34 b7 32 b0 d0 36 30 b0 32 30 00 00 41 90 05 0f b7 e2 c0 6c 00 00 00 2e 7a 54 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 00 08 99 33 32 30 32 d2 35 34 d0 35 30 0f 31 b0 b4 32 34 b7 32 b0 d0 36 30 b0 32 30 00 00 41 90 05 0f 9e dd 68 e4 00 00 00 22 7a 54 58 Data Ascii: PNGIHDRPdthgAMAa cHRMz&u0`:pQ<pHYs+bKGDC.zTXtdate:create3202545012426020Al.zTXtdate:modify3202545012426020Ah"zTX
2024-10-30 02:47:38 UTC	2549	IN	Data Raw: 1b 9d 3f 8f 1f 66 e3 f1 8e 43 42 a8 69 73 cf 4e d2 32 ab 4d 1c c1 2e 97 0f 05 75 03 a2 26 c6 4a 77 ce ad a9 8b d8 a7 ad a2 a1 06 dd 1a 55 d1 de c9 3a cb 41 44 e6 cb 47 16 a0 39 40 73 a6 df 9a fc 2b 4f b3 c0 e9 44 14 80 28 20 2d 46 09 4d 7e c5 5d ce 85 66 4b 9a 96 d9 82 49 6c 6a 16 54 6f d2 cf 1d aa 97 a6 7c 4a 6a 83 c7 c7 2c 4e 2f 35 72 a6 f9 a5 1a ac 5d 94 6e 4e 74 bb a6 3d 61 2c b4 f1 4a 19 72 4b 1d bb 0e e7 ee f6 74 7d e8 7c d6 9c 39 8e 85 ee c7 16 5e 54 35 e5 d4 7d 14 d4 8b 15 e5 a6 c0 d4 1c 5a ab 4c ee e7 d5 97 f9 b2 f8 7a 55 9b 02 c2 a8 5f 57 74 7b ec cc 0f 2d 95 7a 52 80 80 1a 82 fc 5b 68 dc 22 33 9d e6 21 22 ed 85 3a 0e 35 3f f6 0f ba dc 73 40 c5 c1 bd ff 13 c2 93 32 1c ae 8d 9a 0a 87 36 fd 39 60 a4 68 22 2d cc df b8 78 6e 3a dd f5 e1 95 74 c2 f3 Data Ascii: ?fCBisN2M.u&JwU:ADG9@s+OD( -FM~]fKIljTo\|Jj,N/5r]nNt=a,JrKt}\|9^T5}ZLzU_Wt{-zR[h"3!":5?s@269`h"-xn:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49772	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	677	OUT	GET /group/files/page/737/HPMS10.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/jpeg Content-Length: 33965 Connection: close Server: nginx Last-Modified: Wed, 09 Oct 2024 01:54:50 GMT ETag: "6705e26a-84ad" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 03 03 04 03 03 03 03 03 02 02 03 04 03 03 04 04 04 04 04 02 03 05 05 04 04 05 04 04 04 04 ff db 00 43 01 01 01 01 01 01 01 02 01 01 02 04 03 02 03 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ff c0 00 11 08 00 a8 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC@"}!1AQa"q2
2024-10-30 02:47:38 UTC	10458	IN	Data Raw: bb f1 6b 78 92 1b df 87 37 ff 00 b7 c6 a7 e3 3f 10 fc 5c 93 45 d4 2f ed a0 d3 74 7f 16 c9 7e b2 e8 52 c5 23 42 2e 66 b7 68 e5 bd 5b 77 90 ef 25 88 e5 3e 32 fc 1b f0 9d a6 ab f0 ab 67 ec af fb 02 78 28 ea 9e 3e ba f0 ae 7e 0f fe d5 de 21 d7 fc 2b e2 9c 5a e9 57 5f f0 8b 78 ae ed ed 96 7b 2f 0a fa eb 9f eb 62 94 4f fb a1 4f f1 c7 c0 bf 0d 5a fc 63 f8 7f a5 bf ec 9f ff 00 04 e4 16 de 33 b4 d6 b4 8d 5b c2 be 14 fd af bc 45 7f f0 83 c7 11 da ea 04 c5 17 c4 1d 52 38 3c fd 16 d7 4f 11 b9 d2 ee ad a3 67 bd 8e 1f 9b 69 90 15 f1 70 af 15 46 9c 28 d7 92 9c 62 e5 ad ea ab a7 bf fc be 6b 65 ae f6 fb cc 71 74 70 15 7d a5 57 49 a6 e5 4e 5f f2 eb 47 4e ed 2f e0 f5 6d 6d 6b 76 77 39 ef 80 3f 00 b5 cd 7b e1 37 c2 7d 72 6f d9 23 f6 6d f1 1a ea 5e 0c d4 c5 af 89 3e 23 7e db Data Ascii: kx7?\E/t~R#B.fh[w%>2gx(>~!+ZW_x{/bOOZc3[ER8<OgipF(bkeqtp}WIN_GN/mmkvw9?{7}ro#m^>#~
2024-10-30 02:47:38 UTC	7964	IN	Data Raw: 78 c6 d3 4f 3a 79 26 c3 47 b4 ba 1f 60 d3 2d 67 fb 4d cc 37 3a ae d6 95 e4 22 30 d6 c8 2b ce c5 e5 5c 4b 9d d4 78 cc 86 33 96 2a 9c a7 1e 5a 98 8a 98 4a 52 bc 77 75 69 f3 ca 3c b6 73 49 52 aa 9a 4e 16 8b 92 9c 79 b2 2c 4e 57 97 ce a6 1b 1d ca b0 b5 1c 5c a4 e8 d3 c4 4a 3c 9c d6 4a 13 b7 35 f9 b5 b4 a0 d3 8c 5b 6d 68 7d 72 35 19 99 14 cc 12 0d a0 29 30 a1 50 33 d7 a8 f6 aa bf 68 46 2c ab 23 60 9e dc 31 fa 57 cd 7f 10 3e 2f 6b 1e 14 be d2 f4 ef 0b da 58 83 a7 e9 d6 fa 87 8d 0e b1 65 36 a4 40 b9 03 3a 75 b7 93 ff 00 3c bf e7 b0 fd e5 70 5a 17 8f 34 1d 57 e2 9d f5 fd 81 d3 2f b5 16 f1 8f f6 87 87 7c 45 7f e0 d2 3c 42 6d ee 6e 3e cf f6 7f b4 4d e5 cd e5 45 69 ff 00 1e f2 9f fb f7 5f be aa 71 49 26 91 12 e2 15 f0 b8 5a fd 6f fa 5b f0 3d 87 e2 9f ed 2f e0 df 85 Data Ascii: xO:y&G`-gM7:"0+\Kx3*ZJRwui<sIRNy,NW\J<J5[mh}r5)0P3hF,#`1W>/kXe6@:u<pZ4W/\|E<Bmn>MEi_qI&Zo[=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49771	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	676	OUT	GET /group/files/page/737/HALEX.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/jpeg Content-Length: 34661 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-8765" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 Data Ascii: JFIF,,"ExifMM*ICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<w
2024-10-30 02:47:38 UTC	1509	IN	Data Raw: 6f 87 74 f3 7f 71 af 5a dc 45 79 a9 dc 58 db 5a 4b 0b a9 6f 25 45 9e 90 08 08 ca 02 a8 df 20 38 01 31 32 f2 77 02 7e 52 fd 8a c0 83 f6 d4 8e 67 12 4a c9 ac 5d 46 55 d4 28 90 0f b4 fd 0a 8e 46 30 78 c7 15 ad fb 32 7e d1 1a e7 8f bc 37 e1 cd 3e eb 5e 79 35 9b ef 12 ea 52 5f da c5 04 71 95 b2 16 16 82 29 18 ac 7c 2b 48 00 e5 80 63 08 1c 90 05 60 7e c5 49 2d 97 ed d2 90 aa 0d 97 1a b5 c4 11 b1 3e 52 b0 f2 e6 e0 13 8e fc 64 67 ad 78 bf 57 9d 2f 6a a7 a5 e1 d3 e6 7b 11 ad 1a 8e 0e 3d 1f f9 1f a0 29 a0 cb e2 93 e2 fd 36 12 b1 cb 2f 88 9c ab ca 7e 52 a0 cc e4 f1 9e 70 87 03 b9 c0 ae 83 c6 57 6d e1 ff 00 8f fe 30 8e 35 8e 49 6d f5 4d a8 fd 63 38 50 3a fa 0c e7 a7 41 59 be 1c d3 a2 bb f8 97 ae 5b 99 24 85 57 c5 62 48 9e 5f 98 f9 8b 24 c6 30 c1 b8 23 78 50 c0 76 cd Data Ascii: otqZEyXZKo%E 812w~RgJ]FU(F0x2~7>^y5R_q)\|+Hc`~I->RdgxW/j{=)6/~RpWm05ImMc8P:AY[$WbH_$0#xPv
2024-10-30 02:47:38 UTC	16384	IN	Data Raw: af 44 58 34 49 e4 00 3d b4 d0 4a 5d 22 75 03 e5 dd 1a bc 79 dc 49 11 c3 c6 08 61 d7 78 6a f9 ad 3c 62 56 2b 4f b7 4c fa 91 0b 1e e0 0e 08 bd 04 77 eb b7 f0 c5 78 5f 8f ee bc 37 17 c6 9d 0f 47 d1 e5 d7 a4 f1 27 c3 ff 00 18 a5 fd a5 c5 cc d0 c1 e7 c4 23 85 99 05 c6 03 cc 59 d1 11 f0 36 a6 df 5d 8c 7d e7 c2 30 4a be 36 59 56 dd e7 b9 76 17 02 1c 72 4c 9f 6c ce d0 43 16 ce 5b ee e7 a6 46 47 35 8e 5b 9b 7b 6a af 09 3f 8d 37 f7 6b 63 f1 1f 11 23 81 a5 9d 4e 38 59 29 4a 51 bc b9 76 bf 32 5a f6 7b fe 67 b7 fc 3c d5 ad 64 f0 dd d4 ea 21 b6 b7 d3 65 fb 09 78 c3 31 9e 76 90 33 b3 0c 10 31 b4 00 41 3f 79 bd 78 fc 30 fd a7 74 54 f0 8f ed 89 f1 47 4f f9 91 20 f1 2d c4 a1 5b a8 42 66 90 13 f8 94 af dc 9b df 88 8f 07 c3 1f b3 c3 62 b2 fd 97 51 da ad 12 79 aa e4 49 b4 b1 Data Ascii: DX4I=J]"uyIaxj<bV+OLwx_7G'#Y6]}0J6YVvrLlC[FG5[{j?7kc#N8Y)JQv2Z{g<d!ex1v31A?yx0tTGO -[BfbQyI
2024-10-30 02:47:38 UTC	1225	IN	Data Raw: 6d 8c 00 88 ed ed 90 45 1c 7f 40 38 fc 7a f0 0f 5e 6a 48 fc 27 69 6e ff 00 2d b2 0d a7 39 29 c9 a2 8a e9 a3 42 94 67 75 15 f7 1b d6 94 d2 b2 93 2e d9 41 f6 7b 9f 95 76 f2 0f 5e 98 a9 7c 47 ad 59 f8 5b 46 bc d4 b5 29 e3 b5 b0 b1 86 4b 8b 99 e5 3b 52 de 38 d4 b3 bb 93 c2 85 50 49 27 8c 7a f4 a2 8a f5 7d 9c 63 1d 0f 27 99 ca 5a 9f 9e ff 00 f0 52 ef 88 f7 df 1e fe 06 6b 5e 1f fb 5e a1 a6 e9 57 97 56 ab ac e9 d6 8c 45 f1 b4 f3 50 da e9 48 a0 ff 00 c7 dd cc 8d 19 70 14 ec 91 a1 46 04 5b c8 c7 c4 bc 09 e0 0b 3f 8b 9f b4 af 86 7e 13 dc 6a 9a 0c 36 bf 09 9e 3d 53 c5 cd 6f a8 41 1c 77 1a c0 b7 54 68 a1 47 ba 86 66 b5 d3 ad d2 3b 58 99 19 b6 24 72 37 47 a2 8a f9 aa 1f bc 9b e6 fe 6b 7c 8f a2 a9 fb ba 4b 97 b3 3d 3f f6 e7 fd b0 f4 fb 9d 1a ff 00 4c f0 5f c7 4f 04 ea Data Ascii: mE@8z^jH'in-9)Bgu.A{v^\|GY[F)K;R8PI'z}c'ZRk^^WVEPHpF[?~j6=SoAwThGf;X$r7Gk\|K=?L_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	49776	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	674	OUT	GET /group/files/page/737/RAM.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/png Content-Length: 23082 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:48 GMT ETag: "65dc1ac4-5a2a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 03 00 00 00 64 08 06 00 00 00 82 57 55 9d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 28 f6 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f Data Ascii: PNGIHDRdWUsRGBgAMAapHYs+(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/
2024-10-30 02:47:38 UTC	14978	IN	Data Raw: 73 77 61 74 63 68 4e 61 6d 65 3d 22 37 35 25 20 41 7a 75 72 65 20 43 3d 36 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 63 79 61 6e 3d 22 36 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 79 65 6c 6c 6f 77 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 62 6c 61 63 6b 3d 22 30 2e 30 30 30 30 30 30 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 35 30 25 20 41 7a 75 72 65 20 43 3d 34 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 63 79 61 6e 3d 22 34 30 2e 30 30 30 30 30 Data Ascii: swatchName="75% Azure C=60" xmpG:mode="CMYK" xmpG:type="PROCESS" xmpG:cyan="60.000000" xmpG:magenta="0.000000" xmpG:yellow="0.000000" xmpG:black="0.000000"/> <rdf:li xmpG:swatchName="50% Azure C=40" xmpG:mode="CMYK" xmpG:type="PROCESS" xmpG:cyan="40.00000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	49780	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	674	OUT	GET /group/files/page/737/ROH.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/jpeg Content-Length: 45723 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-b29b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 10 a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 1a 40 00 00 01 01 00 03 00 00 00 01 11 80 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0f 00 02 00 00 00 06 00 00 00 bc 01 10 00 02 00 00 00 0c 00 00 00 c2 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 ce 01 1b 00 05 00 00 00 01 00 00 00 d6 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 de 01 32 00 02 00 00 00 14 00 00 00 fc 87 69 00 04 00 00 00 01 00 00 01 10 00 00 03 58 00 08 00 08 00 08 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 00 00 24 9f 00 00 00 27 10 00 24 9f 00 00 00 27 10 41 64 6f Data Ascii: JFIFExifMM*@(12iXCanonCanon EOS R$'$'Ado
2024-10-30 02:47:38 UTC	1509	IN	Data Raw: 61 95 b7 00 9a 3a 87 00 61 95 b7 00 9a 3a 87 00 61 95 b7 00 9a 3a 87 00 05 00 62 e9 86 00 9a 59 c7 00 66 17 e4 00 9a 51 f7 00 66 17 e4 00 9a 51 f7 00 04 00 6a fd aa 00 9a 80 d6 00 6a fd aa 00 9a 80 d6 00 6a fd aa 00 9a 80 d6 00 04 00 74 30 e2 00 9a af b6 00 74 30 e2 00 9a af b6 00 74 30 e2 00 9a af b6 00 04 00 73 fc 27 00 9e 7c 52 00 73 fc 27 00 9e 7c 52 00 73 fc 27 00 9e 7c 52 00 04 00 57 5a db 00 9e 49 8b 00 57 5a db 00 9e 49 8b 00 57 5a db 00 9e 49 8b 00 04 00 57 49 47 00 9e 16 c3 00 57 49 47 00 9e 16 c3 00 57 49 47 00 9e 16 c3 00 04 00 52 ea 42 00 9d fb 6c 00 52 ea 42 00 9d fb 6c 00 52 ea 42 00 9d fb 6c 00 04 00 52 9e 18 00 9e 41 bb 00 52 9e 18 00 9e 41 bb 00 52 9e 18 00 9e 41 bb 00 04 00 32 18 ce 00 9d ef b4 00 32 18 ce 00 9d ef b4 00 32 18 ce 00 9d Data Ascii: a:a:a:bYfQfQjjjt0t0t0s'\|Rs'\|Rs'\|RWZIWZIWZIWIGWIGWIGRBlRBlRBlRARARA222
2024-10-30 02:47:38 UTC	16384	IN	Data Raw: 68 74 74 70 3a 2f 2f 63 69 70 61 2e 6a 70 2f 65 78 69 66 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a Data Ascii: http://cipa.jp/exif/1.0/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:
2024-10-30 02:47:38 UTC	12287	IN	Data Raw: 7f f0 51 ef 18 fe d3 b6 5a 87 86 f4 cb 58 7c 01 f0 e6 fa 44 79 bc 37 a5 dc 34 8d aa 98 db 31 c9 a9 dd 95 59 2f a4 52 14 85 65 4b 78 d8 16 8a de 12 cc 5b e2 e5 47 9f 57 b6 9f a1 f4 91 95 95 91 fb 31 f0 5f f6 a0 f0 cf ed 11 a2 f8 f9 3c 31 78 35 2b 1d 13 52 b0 85 2f a3 74 92 d7 50 d9 36 a5 6e f3 5b ba b3 2b c5 e6 40 e1 64 07 0e 18 30 c8 35 d5 5a 9d c8 3e b5 f9 f9 ff 00 04 46 d5 66 b6 f0 65 d5 87 9a fe 4d df 86 e4 b9 f2 f3 f2 66 2d 6e 65 07 1e de 6b fe 0c de b5 fa 03 64 7e 41 f5 af 2f 15 4d 42 5c a8 d6 8c ae 9d cd 08 9b 08 df 5a af 75 f7 fe b5 3c 4b 90 df 5a 8e e5 73 25 73 3d 8d 0c e9 f8 0d 59 b7 a3 e5 27 da b4 ae 0f de ac fb d2 b8 a9 5b 8d 6e 3b 44 e2 df f1 3f cc d4 97 a3 2e b5 1e 8e e0 c0 3e a7 f9 9a 92 f4 fc eb 56 23 27 49 f8 f6 36 af 9f a2 c7 c8 1b fe cf Data Ascii: QZX\|Dy741Y/ReKx[GW1_<1x5+R/tP6n[+@d05Z>FfeMf-nekd~A/MB\Zu<KZs%s=Y'[n;D?.>V#'I6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	49777	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	411	OUT	GET /group/files/page/737/HG.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/png Content-Length: 11129 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:47 GMT ETag: "65dc1ac3-2b79" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	11129	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 24 00 00 00 64 08 06 00 00 00 2f d6 4d 34 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 90 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f Data Ascii: PNGIHDR$d/M4sRGBgAMAapHYs+iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	49775	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	674	OUT	GET /group/files/page/737/RGH.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/jpeg Content-Length: 44367 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-ad4f" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	8103	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 11 6a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 1a 40 00 00 01 01 00 03 00 00 00 01 11 80 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0f 00 02 00 00 00 06 00 00 00 bc 01 10 00 02 00 00 00 0c 00 00 00 c2 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 ce 01 1b 00 05 00 00 00 01 00 00 00 d6 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 de 01 32 00 02 00 00 00 14 00 00 00 fc 87 69 00 04 00 00 00 01 00 00 01 10 00 00 03 58 00 08 00 08 00 08 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 00 00 24 9f 00 00 00 27 10 00 24 9f 00 00 00 27 10 41 64 6f Data Ascii: JFIFjExifMM*@(12iXCanonCanon EOS R$'$'Ado
2024-10-30 02:47:38 UTC	16384	IN	Data Raw: c9 c3 a2 c7 0a ac 6c 0b ab 13 b3 da e3 ed be bd 8d fe 6a ef fb 7e a5 e8 5f 57 6c ae e7 b1 ec 3b 99 75 0f b5 84 8d be d7 d9 55 8c 96 9f a2 ed 8f 5e 4b 9f d1 fa be 3b ec b7 23 12 c6 b0 92 f3 63 46 fa e0 9f f4 d5 6f ab fe 9a f5 df aa 4f 6d 59 15 36 01 0c c7 ba a8 3e 0c b2 9a ff 00 ef 88 8d 25 13 5d 51 2d 62 47 83 d3 e3 86 00 20 37 74 46 bf 7a af 76 15 8f b5 ce 60 01 ae d6 49 80 3f 92 ac ba ea c0 f6 80 35 d4 04 1b 33 5a 46 d0 21 c4 c0 85 30 91 06 c3 09 00 8a 2f 2b d4 da 6a ca bc 6e 96 37 a9 d6 c0 3b c8 c7 b1 ce 77 fd 26 a2 f4 3f 6f 54 11 a1 f5 ad 83 f2 6a 17 56 20 e4 5e 7b 0e a2 1d 1f 0c 47 14 6e 8e 4f ed 76 35 bf 48 dd 74 7c 80 55 e4 7f 58 3c d9 a2 3f 56 7c 8b d4 31 af b1 ee 81 24 6d 13 f2 5c 97 52 23 f6 86 4f fc 61 5d 53 3e d1 5b df 2d 71 9d ba e9 1d d7 1f Data Ascii: lj~_Wl;uU^K;#cFoOmY6>%]Q-bG 7tFzv`I?53ZF!0/+jn7;w&?oTjV ^{GnOv5Ht\|UX<?V\|1$m\R#Oa]S>[-q
2024-10-30 02:47:38 UTC	16384	IN	Data Raw: 00 43 6f 70 79 72 69 67 68 74 20 31 39 39 39 20 41 64 6f 62 65 20 53 79 73 74 65 6d 73 20 49 6e 63 6f 72 70 6f 72 61 74 65 64 00 00 00 64 65 73 63 00 00 00 00 00 00 00 11 41 64 6f 62 65 20 52 47 42 20 28 31 39 39 38 29 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 63 75 72 76 00 00 00 00 00 00 00 01 02 33 00 00 58 59 5a 20 00 00 00 00 00 00 9c 18 00 00 Data Ascii: Copyright 1999 Adobe Systems IncorporateddescAdobe RGB (1998)XYZ QXYZ curv3curv3curv3XYZ
2024-10-30 02:47:38 UTC	3496	IN	Data Raw: 4a aa 47 ba 5c 85 86 47 5d 81 5a 73 b5 7c a2 a8 77 b8 51 f9 d3 61 f1 bf c2 7f 0d bf d1 a4 d4 2e ad fc 46 b8 05 ae 6d 84 62 e3 76 4e df 31 b7 45 27 b6 0b 0c e0 85 6c e5 bf 6e a2 81 8c 2f e5 b4 77 10 ce 0a c9 0b 1f dd cc a7 ff 00 41 38 e4 f6 1d c8 e9 5e 23 f1 6b fe 09 b5 fb 3c 7c 6b 95 a7 f1 17 c2 7f 0c ad cb 82 d2 b6 96 f3 e8 33 49 bb 8d ee 2c 64 85 26 27 fb ce ac 4e 7f 88 f3 5e 76 23 2f 55 25 ce 99 ee e0 f3 85 4a 1e ce 4b ee 3f 24 5f c7 5a d7 c4 7f 14 a4 10 cb 36 a9 79 33 34 f6 b6 b1 49 ca 2e 14 16 de cd 85 88 61 72 f2 1c 74 1b 8f 01 7d 93 e1 b7 c1 6b cf 05 ea 70 de 6b 92 c7 75 a8 14 1f ba 8b e6 8a d0 7f 71 3f bc 73 d5 bb e4 8e 32 49 fb 2b c2 1f f0 46 ff 00 83 bf 0c b5 19 ee bc 13 71 e2 ef 0d dd dd 0c 33 2e b5 2c ca de 8b 9c 87 c0 c7 01 9c e3 9f 53 57 35 Data Ascii: JG\G]Zs\|wQa.FmbvN1E'ln/wA8^#k<\|k3I,d&'N^v#/U%JK?$_Z6y34I.art}kpkuq?s2I+Fq3.,SW5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49779	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:37 UTC	414	OUT	GET /group/files/page/737/HGKLN.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:37 GMT Content-Type: image/jpeg Content-Length: 38918 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-9806" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 01 02 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 33 31 91 01 00 07 00 00 00 04 01 02 03 00 92 86 00 07 00 00 00 3a 00 00 00 c0 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 01 40 00 00 a0 03 00 03 00 00 00 01 00 f0 00 00 00 00 00 00 41 53 43 49 49 00 00 00 78 72 3a 64 3a 44 41 46 39 5a 32 74 56 4f 4f 59 3a 33 2c 6a 3a 39 35 32 39 Data Ascii: JFIF``ExifMM*V^(if``0231:0100@ASCIIxr:d:DAF9Z2tVOOY:3,j:9529
2024-10-30 02:47:38 UTC	1509	IN	Data Raw: c7 bf 11 74 f6 16 77 56 73 7f 6a f8 ba c7 ec fa 2c d2 c7 35 c2 c8 3e 43 3c 68 60 07 e4 08 0a b6 78 0b f2 9f 9a bd 73 f6 2e b5 f8 61 e2 ff 00 81 36 77 1f 11 be 19 f8 27 47 f0 ae 87 67 2e ac 35 ed 2e d2 e2 de ea 20 26 91 21 8d ae 12 74 99 e4 92 68 e6 c4 31 b1 09 1e d2 76 00 99 fd 2c fd 8e fe 35 f8 47 5e d2 2d 7f e1 5c ea d6 33 78 65 a6 82 33 b7 54 9a 46 8e 57 c3 11 2a dc 42 24 f3 da 29 19 d9 83 bb 6d da 71 8c 1a f8 9e 2c c5 cb d8 49 52 5b 77 b1 d3 4b 09 2a ce f3 f8 3e 67 99 ff 00 c1 0f 3e 02 f8 b9 3e 0b eb de 13 f8 99 e1 7b 16 d4 74 59 a7 9f 44 d5 ef 59 6e 7c f4 bc 84 c7 70 80 a9 cb 46 a2 dd 41 00 e0 ac 80 0f 9a 21 9e b3 c6 5f f0 48 bd 4b 5d f1 b6 82 3c 45 aa 37 88 bc 2f a1 3c b7 09 05 b3 1d 2e 14 f3 a5 56 9c 94 87 74 92 93 2b 34 c8 ac e3 6f 94 40 d8 40 79 Data Ascii: twVsj,5>C<h`xs.a6w'Gg.5. &!th1v,5G^-\3xe3TFWB$)mq,IR[wK>g>>{tYDYn\|pFA!_HK]<E7/<.Vt+4o@@y
2024-10-30 02:47:38 UTC	16384	IN	Data Raw: bf d8 a3 b8 9e 4d d0 ea 91 6d 75 da e7 38 41 b0 a4 7b 4f cb fb bc e7 e6 af bc 3f 61 cf 03 78 7f e2 3f c4 6d 37 c5 fa 56 8f e1 1d 62 19 b5 3b 3b 9d 62 e1 16 e9 6c 7c 24 e5 0a c3 1c 10 79 ff 00 6a 96 79 a7 f3 32 c1 b6 83 14 67 ee b0 ac f1 2a a5 1a b7 8b f7 bb 9a 53 c6 51 a7 86 95 39 c7 4e 9d 9f cc fb 23 50 f8 53 a8 ff 00 c1 51 3e 0e 4f e3 0f 0a c9 79 e1 9f 1f 78 57 54 3a 72 cd 34 f2 ac 97 d6 e2 18 dc a3 e3 82 7c c6 61 bb d0 1a f9 f7 f6 83 fd 83 7e 35 7c 31 f8 0d 62 ba 16 8f aa 5e 6b ba 96 b2 d0 6a f6 56 d3 19 16 fe 25 cf d9 ee a1 85 23 40 32 7e d0 87 ed 25 7c a5 8f 72 e4 33 91 fa fd f0 d3 4f 93 46 f0 c4 36 47 fb 1e 35 89 04 09 2d bf df 96 30 b8 66 76 20 05 c9 04 6d 1e 63 53 6e 7e 21 5b e9 37 4d 66 d7 de 75 d4 0e 92 b1 77 8d 8b 0e 78 5f 5f bc 3f ef b3 5e 4e Data Ascii: Mmu8A{O?ax?m7Vb;;bl\|$yjy2g*SQ9N#PSQ>OyxWT:r4\|a~5\|1b^kjV%#@2~%\|r3OF6G5-0fv mcSn~![7Mfuwx__?^N
2024-10-30 02:47:38 UTC	5482	IN	Data Raw: 36 b4 61 55 09 6c 56 2f c1 ef f8 29 0f 89 be 0c fc 40 8b c0 da b5 ee 9b 1d ce b5 7b 1b 8d 25 c4 da 87 f6 53 37 98 f2 2c 97 81 8b 4e f1 38 87 73 a4 67 cb 75 62 1e 40 0d 7d 05 27 ed e0 3c 3d af de 59 f8 6f 5c d1 35 48 75 0b 17 ba 97 4e bb 9b ca d4 45 cb 21 3f 65 74 f9 30 ee d9 1b 24 00 a9 c8 c7 cc f8 f1 f1 19 ee 36 bc 6d 28 b8 f3 6e d6 b6 2e 9e 51 42 8c 93 bd d2 e8 ca 5e 06 ff 00 82 7c 78 3b e1 8d c5 d2 fc 3b 86 e3 c0 3e 22 bc b7 33 b4 33 6a b3 de 40 f1 c2 ec a2 37 57 69 59 10 ac c0 b7 92 ea 70 b1 7a 1a ed 6f f5 cd 27 c3 5f 0f 35 0b 1d 73 c7 0b 6f a8 5c 40 15 e1 b0 b3 78 6d fe d0 71 b2 54 c3 99 8b 2e d5 cc 81 b2 9b 4e e0 33 5f 11 f8 9f f6 af d5 be 1f fc 4a bd d5 fc 51 e2 9b af 0e d8 5c 59 5a 9f 2f fb 39 85 f6 97 21 06 51 08 8a 4f 28 48 cc b1 a8 2c 5e 31 c8 Data Ascii: 6aUlV/)@{%S7,N8sgub@}'<=Yo\5HuNE!?et0$6m(n.QB^\|x;;>"33j@7WiYpzo'_5so\@xmqT.N3_JQ\YZ/9!QO(H,^1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	49781	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:38 UTC	411	OUT	GET /group/files/page/737/HP.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:38 GMT Content-Type: image/png Content-Length: 16661 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:48 GMT ETag: "65dc1ac4-4115" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 64 08 06 00 00 00 4e eb 38 5f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 27 88 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f Data Ascii: PNGIHDRdN8_sRGBgAMAapHYs+'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/
2024-10-30 02:47:38 UTC	8557	IN	Data Raw: 30 30 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 37 35 25 20 41 7a 75 72 65 20 43 3d 36 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 78 6d 70 47 3a 63 79 61 6e 3d 22 36 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 6d 61 67 65 6e 74 61 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 79 65 6c 6c 6f 77 3d 22 30 2e 30 30 30 30 30 30 22 20 78 6d 70 47 3a 62 6c 61 63 6b 3d 22 30 2e 30 30 30 30 30 30 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 78 6d 70 47 3a 73 77 61 74 63 68 4e 61 6d 65 3d 22 35 30 25 20 41 7a 75 72 65 20 43 3d 34 30 22 20 78 6d 70 47 3a 6d 6f 64 65 3d 22 43 4d 59 4b 22 20 78 6d 70 47 3a 74 79 70 65 3d 22 50 52 4f 43 45 53 53 22 20 Data Ascii: 00"/> <rdf:li xmpG:swatchName="75% Azure C=60" xmpG:mode="CMYK" xmpG:type="PROCESS" xmpG:cyan="60.000000" xmpG:magenta="0.000000" xmpG:yellow="0.000000" xmpG:black="0.000000"/> <rdf:li xmpG:swatchName="50% Azure C=40" xmpG:mode="CMYK" xmpG:type="PROCESS"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49782	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:38 UTC	413	OUT	GET /group/files/page/737/HGHK.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:38 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:38 GMT Content-Type: image/jpeg Content-Length: 53478 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:58 GMT ETag: "65e6e616-d0e6" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 19 10 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 2d c6 c0 00 00 27 10 00 2d c6 c0 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 32 3a 32 31 20 31 36 3a 34 38 3a 35 32 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 40 a0 03 00 04 00 00 00 01 00 00 00 f0 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF,,ExifMM*bj(1r2i-'-'Adobe Photoshop 25.4 (Windows)2024:02:21 16:48:52@
2024-10-30 02:47:38 UTC	1509	IN	Data Raw: 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 c4 00 00 00 88 76 75 65 64 00 00 03 Data Ascii: OFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmddvued
2024-10-30 02:47:38 UTC	16384	IN	Data Raw: 46 08 5a 08 6e 08 82 08 96 08 aa 08 be 08 d2 08 e7 08 fb 09 10 09 25 09 3a 09 4f 09 64 09 79 09 8f 09 a4 09 ba 09 cf 09 e5 09 fb 0a 11 0a 27 0a 3d 0a 54 0a 6a 0a 81 0a 98 0a ae 0a c5 0a dc 0a f3 0b 0b 0b 22 0b 39 0b 51 0b 69 0b 80 0b 98 0b b0 0b c8 0b e1 0b f9 0c 12 0c 2a 0c 43 0c 5c 0c 75 0c 8e 0c a7 0c c0 0c d9 0c f3 0d 0d 0d 26 0d 40 0d 5a 0d 74 0d 8e 0d a9 0d c3 0d de 0d f8 0e 13 0e 2e 0e 49 0e 64 0e 7f 0e 9b 0e b6 0e d2 0e ee 0f 09 0f 25 0f 41 0f 5e 0f 7a 0f 96 0f b3 0f cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b Data Ascii: FZn%:Ody'=Tj"9Qi*C\u&@Zt.Id%A^z&Ca~1Om&Ed#Cc'Ij4Vx
2024-10-30 02:47:39 UTC	16384	IN	Data Raw: f0 07 5d bd 79 af 40 b5 fd 9b bc 75 75 ac d9 d8 af 81 bc 41 7d 1e b9 14 67 4a b8 df 0c 31 ea 0e ec c0 2c 21 a4 dd 23 1d a7 01 7f 88 15 e0 e3 3f 5f 96 e6 dc 3f 4e 0e 54 b1 11 9c 55 b6 97 33 5b ef ca db 5b e9 73 e7 f3 4c a7 88 5d a9 55 c3 4e 9c b5 f8 97 2a 7b 6d cd 64 fc ed e5 e4 7c 2b fb 75 69 cb e2 8f da 6f e1 be 92 bb 8c 97 d7 ab 2d c6 e3 97 65 13 47 1e ec 76 c8 47 38 af a8 b4 0d 40 a6 90 92 28 91 56 69 64 98 0e bc b3 1c 7f 2f d6 a4 f1 8f ec 11 a3 78 f3 e2 dd 9f c4 2d 5b c4 e3 c2 3a 87 80 34 38 e4 d5 74 af 11 4c ba 63 db 3a b4 de 63 2a 4b 86 69 14 c8 3f 72 0e f6 da 71 9c 56 e7 88 3e 15 ea 1e 00 b1 d2 86 a1 75 a3 d8 58 eb 08 a7 46 bb 9f 52 8e 38 75 98 cb 0f 2e 5b 72 7f d6 29 e8 4a e7 0c 71 cf 5a eb e1 5c eb 09 fb da 93 9a 52 a9 39 3b 5f 5b 36 da d1 eb d4 Data Ascii: ]y@uuA}gJ1,!#?_?NTU3[[sL]UN{md\|+uio-eGvG8@(Vid/x-[:48tLc:cKi?rqV>uXFR8u.[r)JqZ\R9;_[6
2024-10-30 02:47:39 UTC	3658	IN	Data Raw: ac 4c d4 e7 ff 00 3e e0 ec bf ed e9 ee d7 92 b5 fb 1f 47 7f c1 53 bf e0 a5 97 5f b6 46 a5 37 85 f4 3b 99 1b c1 70 38 77 b8 09 e5 9d 65 d0 e5 04 68 40 f2 ed 10 f2 06 06 ff 00 41 5f 18 be 99 6f 68 86 79 be 69 09 dd 85 7e f9 cd 36 cd 5a ef 2c f2 34 8c d9 db bb 9d be ff 00 87 6c f0 3d 2a 17 b6 52 ec bf 33 2a fa 1c 57 e8 39 4e 57 47 07 45 61 a8 2b 45 7e 7d df 9b 3e 4b 33 c7 4a bc bd a4 ed d9 25 b2 5d 92 ec 48 9a 81 83 fd 4c 51 a7 7f 5e 7d 6a 58 af 1d 1d 77 37 ca fd bd 7f 0a 83 6c 16 b1 ee 91 b0 3b 03 d4 d4 07 5c b7 89 94 44 af 24 88 39 62 38 53 e9 5f 51 47 95 2d 11 e0 3a 33 93 b2 34 27 b7 49 a2 66 6d d9 23 03 23 93 55 d7 49 98 86 09 f7 5b a6 69 6d af fe df 7b ba 49 16 35 8f ae 7b 7e 15 6b 50 f1 0d ba 15 8e 30 cd b8 e0 31 f9 71 fc eb a7 99 f4 34 8e 0e 9c 75 ad Data Ascii: L>GS_F7;p8weh@A_ohyi~6Z,4l=R3W9NWGEa+E~}>K3J%]HLQ^}jXw7l;\D$9b8S_QG-:34'Ifm##UI[im{I5{~kP01q4u

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:38 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024738Z-16849878b7828dsgct3vrzta7000000005r000000000unx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:38 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:38 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bebabdad-901e-0029-5d45-28274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024738Z-r197bdfb6b4gx6v9pg74w9f47s00000009g0000000009hsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:38 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024738Z-17c5cb586f6lxnvg801rcb3n8n000000078g00000000g5xz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.7	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:38 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024738Z-15b8d89586fxdh48ft0acdbg4400000001ag00000000168y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:38 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:38 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 96753eec-301e-0000-2f2c-26eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024738Z-15b8d89586f5s5nz3ffrgxn5ac00000008500000000065ac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:38 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	49791	63.140.62.17	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	1062	OUT	GET /b/ss/hphplaza-corporate,hphglobal-test/1/H.21/s88884942141825?AQB=1&ndh=1&t=29/9/2024%2022%3A47%3A30%202%20240&ce=UTF-8&ns=harbourplazahotel&pageName=group%3Aen%3Astaff-offer&g=https%3A//www.harbour-plaza.com/group/en/staff-offer&cc=HKD&events=event4&c12=Wednesday&v17=Wednesday&v21=group&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1 HTTP/1.1 Host: harbourplazahotel.122.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:39 UTC	1227	IN	HTTP/1.1 302 Found access-control-allow-origin: * vary: Origin date: Wed, 30 Oct 2024 02:47:39 GMT content-type: text/plain;charset=utf-8 expires: Tue, 29 Oct 2024 02:47:39 GMT last-modified: Thu, 31 Oct 2024 02:47:39 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_vi=[CS]v1\|3390CF2595BB7DD7-40001FF24355CD74[CE]; Path=/; Domain=harbourplazahotel.122.2o7.net; Max-Age=63072000; Expires=Fri, 30 Oct 2026 02:47:47 GMT; SameSite=None; Secure location: https://harbourplazahotel.122.2o7.net/b/ss/hphplaza-corporate,hphglobal-test/1/H.21/s88884942141825?AQB=1&pccr=true&vidn=3390CF2595BB7DD7-40001FF24355CD74&ndh=1&t=29/9/2024%2022%3A47%3A30%202%20240&ce=UTF-8&ns=harbourplazahotel&pageName=group%3Aen%3Astaff-offer&g=https%3A//www.harbour-plaza.com/group/en/staff-offer&cc=HKD&events=event4&c12=Wednesday&v17=Wednesday&v21=group&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1 content-length: 0 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	49792	142.250.185.98	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	1029	OUT	GET /pagead/viewthroughconversion/945566240/?random=1730256450177&cv=9&fst=1730256450177&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&tiba=CK%20Group%20Staff%20Offer&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:39 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 02:47:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 30-Oct-2024 03:02:39 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 02:47:39 UTC	536	IN	Data Raw: 31 31 63 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 11c0(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-30 02:47:39 UTC	1378	IN	Data Raw: 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 Data Ascii: l",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))br
2024-10-30 02:47:39 UTC	1378	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 20 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 Data Ascii: e(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R(
2024-10-30 02:47:39 UTC	1260	IN	Data Raw: 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 63 61 3d 44 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 Data Ascii: pics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try{var ca=D.sendBeacon&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.sr
2024-10-30 02:47:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	49788	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	414	OUT	GET /group/files/page/737/HPME9.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:39 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: image/jpeg Content-Length: 18715 Connection: close Server: nginx Last-Modified: Tue, 03 Sep 2024 06:52:23 GMT ETag: "66d6b227-491b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:39 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 a4 00 00 00 1b 01 05 00 01 00 00 00 ac 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 56 00 00 00 00 00 00 00 06 00 00 90 07 00 04 00 00 00 30 32 33 31 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 03 00 01 00 00 00 40 01 00 00 03 a0 03 00 01 00 00 00 a8 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 00 ff e1 05 04 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 Data Ascii: JFIFExifII*(iV02310100@``http://ns.adobe.com/xap/1.0/<x:xmpmeta x
2024-10-30 02:47:39 UTC	1509	IN	Data Raw: e2 35 92 19 12 68 8f 49 23 60 41 fc 45 79 c7 c5 8d 56 41 35 a6 98 8e c2 2d 9e 74 8b fd e3 92 17 3f 4c 1f ce b3 3e 1b eb 72 59 eb 71 59 3b 8f b3 5d 9f 2f 69 3c 07 3f 74 8f 7c e0 7e 35 bd 39 24 ec 44 a9 b7 1e 63 d5 75 08 10 c6 3c b0 49 24 12 4d 71 1e 24 86 c9 5a 48 ee 42 48 aa c4 80 47 35 d9 cf 69 73 3b 7c e0 81 d3 9e 05 72 5e 24 d0 e7 9e 70 8a c1 94 0e 76 9c 8a e9 9a ba d8 c2 0f 5d cf 09 b3 7f 3f 50 b8 9c a9 4c 3b 8d 84 63 69 27 a6 2b 5b c3 ba 73 6a fa 84 b6 31 4c b0 ca 58 4f 1b 38 c8 3b 73 91 fa e7 f0 ad ed 5f c1 d7 26 ea 56 b1 be 96 0c fc ce a2 24 60 cd 8f 56 07 9c 0a e4 ac 1e 7d 3b 56 1e 55 c3 99 e2 91 90 4b 80 09 3c 8e c3 1e d5 cd a4 6c 74 7c 57 3d 0b e2 e7 89 ee 35 9f 09 43 e1 c3 a5 bc 3a 94 6f 1b c1 74 b2 6f e5 58 13 b7 0b 9e 6b 91 d3 3c 6d a8 48 5e Data Ascii: 5hI#`AEyVA5-t?L>rYqY;]/i<?t\|~59$Dcu<I$Mq$ZHBHG5is;\|r^$pv]?PL;ci'+[sj1LXO8;s_&V$`V};VUK<lt\|W=5C:otoXk<mH^
2024-10-30 02:47:39 UTC	1663	IN	Data Raw: 27 d5 75 3b 7b 18 a4 48 5e 66 da 1e 4e 83 82 79 fc ab d6 35 6f 03 c5 e0 bf 0d ff 00 6a 5e 5b c3 7f a8 59 cf 6e cf 13 b9 f2 a5 fd e3 92 be 98 65 da 0f 07 18 35 95 2a 7c d7 b1 bc ea 46 9d 97 56 70 09 61 7f 05 8c 7a b4 49 2c 36 e2 5d 89 70 a7 69 de 39 e0 f5 e3 d4 74 c8 f5 ae e3 c2 9f 15 6f 74 f7 48 75 e8 be db 6f f7 7c f5 c0 95 47 bf 66 fd 0f b9 ae 83 fe 13 ab 9f 15 78 57 59 8a cb 4a 96 da 01 09 59 11 9d 64 01 b9 21 50 0c 60 74 ed da bc 55 90 e4 e3 9c 73 5a 54 a6 a1 6b 3b 91 4e 5e d5 3e 65 6b 1d f7 8c 75 bb 6d 73 c4 37 17 b6 52 17 b5 65 45 8c 91 82 00 51 9e be f9 a5 f0 80 32 78 93 4b 00 16 c5 d4 4d c7 b3 03 fd 2b 85 b6 95 a3 60 50 f3 5d f7 c3 3b 84 1e 25 b3 79 e2 94 05 62 03 46 bb 80 24 10 2b 25 49 b9 5d 15 36 a3 1b 1e fd 3b bc a5 72 30 7a 0c 74 15 9f aa 08 Data Ascii: 'u;{H^fNy5oj^[Yne5*\|FVpazI,6]pi9totHuo\|GfxWYJYd!P`tUsZTk;N^>ekums7ReEQ2xKM+`P];%ybF$+%I]6;r0zt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	49793	46.228.164.13	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	559	OUT	GET /r/dft/id/L21rdC8xMDk4L3BpZC84Njc2MzQ5OC90LzA HTTP/1.1 Host: d.turn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:39 UTC	409	IN	HTTP/1.1 200 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: private, max-age=7200 pragma: cache set-cookie: uid=3921844034577116075; Domain=.turn.com; Expires=Mon, 28-Apr-2025 02:47:39 GMT; Path=/; Secure; SameSite=None content-type: application/javascript transfer-encoding: chunked date: Wed, 30 Oct 2024 02:47:39 GMT connection: close
2024-10-30 02:47:39 UTC	961	IN	Data Raw: 31 45 36 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 64 28 61 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 63 2e 70 72 6f 74 6f 74 79 70 65 29 61 5b 62 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 5b 62 5d 3b 72 65 74 75 72 6e 20 61 7d 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3d 62 2c 61 2e 65 78 70 6f 72 74 73 3d 63 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 7c 7c 7b 7d 2c 28 74 Data Ascii: 1E61!function(){var a=void 0,b=function(a,b){function c(a){return a?d(a):void 0}function d(a){for(var b in c.prototype)a[b]=c.prototype[b];return a}return a.exports=b,a.exports=c,c.prototype.on=function(a,b){return this._callbacks=this._callbacks\|\|{},(t
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 65 3e 64 3b 2b 2b 64 29 63 5b 64 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 7c 7c 7b 7d 2c 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 5b 61 5d 7c 7c 5b 5d 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 28 61 29 2e 6c 65 6e 67 74 68 7d 2c 61 2e 65 78 70 6f 72 74 73 7d 28 7b 7d 2c 7b 7d 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b Data Ascii: c.length;e>d;++d)c[d].apply(this,b)}return this},c.prototype.listeners=function(a){return this._callbacks=this._callbacks\|\|{},this._callbacks[a]\|\|[]},c.prototype.hasListeners=function(a){return!!this.listeners(a).length},a.exports}({},{}),c=function(b,c){
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 7d 63 61 74 63 68 28 65 29 7b 64 28 6a 28 65 29 29 7d 7d 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 63 5b 32 5d 3b 74 72 79 7b 65 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 3f 66 28 61 29 3a 61 29 7d 63 61 74 63 68 28 67 29 7b 65 28 67 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 3f 61 3a 61 3d 3d 3d 4f 62 6a 65 63 74 28 61 29 26 26 22 74 68 65 6e 22 69 6e 20 61 3f 67 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 44 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 61 2e 74 68 65 6e 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: }catch(e){d(j(e))}},b)}function l(a){return new c(function(b,c,d,e){var f=c[2];try{e("function"==typeof f?f(a):a)}catch(g){e(g)}})}function m(a){return a instanceof c?a:a===Object(a)&&"then"in a?g(function(b,c,d){D(function(){try{var e=a.then;"function"==
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 29 7b 76 61 72 20 64 3d 49 28 48 2c 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b 72 65 74 75 72 6e 20 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 65 3d 62 2e 6c 65 6e 67 74 68 2c 64 5b 30 5d 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 64 2c 66 29 7b 72 65 74 75 72 6e 20 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 64 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 62 2c 61 2c 66 2c 65 29 7d 29 7d 29 7d 2c 47 2e 61 70 70 6c 79 28 62 2c 64 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 72 65 Data Ascii: ){var d=I(H,arguments,1);return a(b,function(b){var e;return e=b.length,d[0]=function(b,d,f){return a(b,function(b){return a(d,function(a){return c(b,a,f,e)})})},G.apply(b,d)})}function A(a){return{state:"fulfilled",value:a}}function B(a){return{state:"re
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 29 4a 3d 73 65 74 49 6d 6d 65 64 69 61 74 65 2e 62 69 6e 64 28 62 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 29 7b 76 61 72 20 52 3d 6e 65 77 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 3b 52 2e 70 6f 72 74 31 2e 6f 6e 6d 65 73 73 61 67 65 3d 45 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 52 2e 70 6f 72 74 32 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 30 29 7d 7d 65 6c 73 65 20 4a 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 26 26 70 72 6f 63 65 73 73 2e 6e 65 78 74 54 69 63 6b 3f 70 72 6f 63 65 73 73 2e 6e 65 78 74 54 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 4c 28 61 2c 30 29 7d 3b Data Ascii: ypeof setImmediate)J=setImmediate.bind(b);else if("undefined"!=typeof MessageChannel){var R=new MessageChannel;R.port1.onmessage=E,J=function(){R.port2.postMessage(0)}}else J="object"==typeof process&&process.nextTick?process.nextTick:function(a){L(a,0)};
2024-10-30 02:47:39 UTC	1344	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 3b 76 61 72 20 64 3d 67 2c 65 3d 63 3b 62 2e 6e 6f 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 64 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 2c 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 64 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 64 65 74 61 63 Data Ascii: nction(a,b){a.exports=b;var d=g,e=c;b.noop=function(){},b.on=function(a,b,c){d.document.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c)},b.removeListener=function(a,b,c){d.document.addEventListener?a.removeEventListener(b,c,!1):a.detac
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 31 39 37 32 0d 0a 3b 76 61 72 20 6b 3b 69 66 28 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 28 61 29 7d 2c 76 6f 69 64 20 30 21 3d 3d 64 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 73 6f 6c 76 65 28 64 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 29 7d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 22 2f 2f 64 2e 74 75 72 6e 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 73 69 7a 7a 6c 65 2e 6a 73 22 2c 6d 3d 62 2e 6c 6f 61 64 53 63 72 69 70 74 28 6c 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 Data Ascii: 1972;var k;if(b.querySelector=function(a){return k(a)},void 0!==d.document.querySelector)k=function(a){return e.resolve(d.document.querySelector(a))};else{var l="//d.turn.com/scripts/sizzle.js",m=b.loadScript(l).then(function(){return k=function(a){retu
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 3c 66 29 6c 3d 64 2e 6c 6f 61 64 53 63 72 69 70 74 28 61 2b 68 2b 63 29 2c 6d 2e 70 75 73 68 28 6c 29 3b 65 6c 73 65 20 66 6f 72 28 6b 3d 6a 28 68 2c 66 29 3b 68 3d 6b 2e 70 6f 70 28 29 3b 29 6c 3d 64 2e 6c 6f 61 64 53 63 72 69 70 74 28 61 2b 68 2b 63 29 2c 6d 2e 70 75 73 68 28 6c 29 3b 72 65 74 75 72 6e 20 65 2e 61 6c 6c 28 6d 29 7d 7d 2c 69 3d 62 2e 64 61 74 61 54 6f 51 75 65 72 79 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 2c 64 2c 65 3d 5b 5d 3b 61 2e 6c 65 6e 67 74 68 3b 29 63 3d 61 2e 70 6f 70 28 29 2c 62 3d 61 2e 70 6f 70 28 29 2c 64 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 2c 65 2e 70 75 73 68 28 64 Data Ascii: <f)l=d.loadScript(a+h+c),m.push(l);else for(k=j(h,f);h=k.pop();)l=d.loadScript(a+h+c),m.push(l);return e.all(m)}},i=b.dataToQueryString=function(a){for(var b,c,d,e=[];a.length;)c=a.pop(),b=a.pop(),d=encodeURIComponent(b)+"="+encodeURIComponent(c),e.push(d
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 20 63 3d 5b 5d 3b 72 65 74 75 72 6e 20 70 2e 65 61 63 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 72 65 6a 65 63 74 65 64 22 3d 3d 3d 61 2e 73 74 61 74 65 29 66 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 61 2e 72 65 61 73 6f 6e 29 3b 65 6c 73 65 7b 76 61 72 20 62 3d 61 2e 76 61 6c 75 65 2c 64 3d 62 2e 6b 65 79 2c 65 3d 62 2e 76 61 6c 75 65 3b 2d 31 21 3d 3d 64 26 26 63 2e 70 75 73 68 28 64 2c 65 29 7d 7d 29 2c 61 28 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 62 3d 5b 5d 3b 72 65 74 75 72 6e 20 70 2e 65 61 63 68 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 76 61 72 20 63 3d 71 28 61 29 3b 62 2e 70 75 73 68 28 63 29 7d 63 61 74 63 68 28 64 29 7b 66 2e 65 6d 69 74 28 Data Ascii: c=[];return p.each(b,function(a){if("rejected"===a.state)f.emit("error",a.reason);else{var b=a.value,d=b.key,e=b.value;-1!==d&&c.push(d,e)}}),a(c)}function c(a,c){function d(){var b=[];return p.each(a,function(a){try{var c=q(a);b.push(c)}catch(d){f.emit(
2024-10-30 02:47:39 UTC	1370	IN	Data Raw: 63 6b 65 64 3b 63 61 73 65 22 73 65 6c 65 63 74 65 64 56 61 6c 75 65 22 3a 72 65 74 75 72 6e 20 62 2e 6f 70 74 69 6f 6e 73 5b 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 2e 76 61 6c 75 65 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 64 29 7d 7d 69 66 28 21 28 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 61 5b 30 5d 26 26 61 5b 31 5d 29 29 72 65 74 75 72 6e 20 67 2e 72 65 6a 65 63 74 28 7b 6d 65 73 73 61 67 65 3a 22 49 6e 76 61 6c 69 64 20 65 78 70 72 65 73 73 69 6f 6e 22 2c 64 61 74 61 3a 61 7d 29 3b 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 61 5b 31 5d 3b 74 72 79 7b 72 65 74 75 72 6e 20 6f 2e 6d 6f 64 65 3d 3d 3d 6c 2e 64 65 62 75 67 3f 69 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f Data Ascii: cked;case"selectedValue":return b.options[b.selectedIndex].value;default:return b.getAttribute(d)}}if(!(a&&a instanceof Array&&a[0]&&a[1]))return g.reject({message:"Invalid expression",data:a});var c=a[0],d=a[1];try{return o.mode===l.debug?i.parentSelecto

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024739Z-16849878b78xblwksrnkakc08w00000006q000000000b6ek x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:39 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024739Z-r197bdfb6b4qbfppwgs4nqza80000000061g000000007mk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024739Z-16849878b78qwx7pmw9x5fub1c00000005kg00000000apwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024739Z-16849878b78bjkl8dpep89pbgg000000062g00000000kaa3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:39 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:39 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9b80997a-f01e-0003-4c76-2a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024739Z-r197bdfb6b4g24ztpxkw4umce80000000930000000001h9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-30 02:47:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	49795	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	713	OUT	GET /group/files/hotel_brands/1/ed2969f7-6fc4-4cdb-8a85-042b829c78c3.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:40 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: image/png Content-Length: 4317 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-10dd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	4317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b2 00 00 00 4c 08 06 00 00 00 c9 12 ed 01 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRLtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	49796	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	713	OUT	GET /group/files/hotel_brands/2/31d91a76-9bd7-4e36-b5a8-21bb59ce4410.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:40 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: image/png Content-Length: 4113 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-1011" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	4113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 62 00 00 00 4c 08 06 00 00 00 96 03 62 48 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRbLbHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	49799	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	412	OUT	GET /group/files/page/737/RAM.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:40 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: image/png Content-Length: 23082 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:48 GMT ETag: "65dc1ac4-5a2a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	15544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 03 00 00 00 64 08 06 00 00 00 82 57 55 9d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 28 f6 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f Data Ascii: PNGIHDRdWUsRGBgAMAapHYs+(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/
2024-10-30 02:47:40 UTC	1509	IN	Data Raw: e3 39 30 a0 4d b5 a1 bf 89 e7 31 b5 ee 79 c4 40 6b b7 66 08 0d b8 30 83 07 1b 04 2a 56 84 8a 7f 55 59 a7 9e 4b 81 80 73 86 00 7c e6 e8 ca db 80 35 03 21 0c f0 59 9f d8 87 92 4e 1e 89 1c d4 ea 80 00 86 80 83 89 97 a9 50 f8 1e 98 7f 7d 3d 4b bc 37 51 f9 1e f5 a9 fa d0 16 72 af 71 50 5d 09 02 53 99 f1 15 10 13 02 ad 0c 9a 23 4c 28 c3 e6 bb 16 15 06 2f 9d 1f f1 05 85 aa a5 86 6f b0 50 8d 12 2a 17 ff 38 c8 2a 17 cc 03 48 dc 72 dd eb 59 ac f5 fb fe d1 eb c8 69 fd 09 5e 3d 80 5d 8d ac 4f d8 d8 8a da 1e 15 5e df 7a 4a fb 86 af 66 8f 7d e6 c2 39 78 e6 88 88 2b 6b 8e 71 74 1d 9b 25 62 00 14 74 08 fb f0 99 02 83 1e 83 15 f7 5d 49 e9 7d 76 f1 3e 6d fc 6a 26 e5 aa 54 90 3a fe 35 92 f7 29 60 69 50 89 a4 84 49 a2 9c 17 96 50 97 55 f9 81 bd ea 5f af 1e cc fb f4 a8 34 4f Data Ascii: 90M1y@kf0VUYKs\|5!YNP}=K7QrqP]S#L(/oP8*HrYi^=]O^zJf}9x+kqt%bt]I}v>mj&T:5)`iPIPU_4O
2024-10-30 02:47:40 UTC	6029	IN	Data Raw: fd 4c 5c fc f0 1f 07 89 9c a9 50 c2 f2 17 e0 81 44 6a 32 24 31 2e 32 24 73 b3 39 a1 a1 ba b1 c9 df 9d e7 71 d7 69 78 f7 47 dc 59 18 ad a8 b6 88 38 bf 78 bf 7e cd 1e f6 29 a2 0a 8d f1 fa d6 13 8e 97 ef b9 7f 12 55 1b dc 8c 6d 5a f5 6c 18 f8 41 15 e4 63 82 4b cb 8f e8 9d 6e 18 7c 58 ba eb b1 77 3c 6f 9b e2 e9 45 9d b7 5f 01 b3 2e b4 88 88 d6 d9 51 7e 5e 19 60 8c ea 57 05 0c ec a4 2a ed 01 af 57 42 a4 8d 81 24 20 38 f9 f0 f9 85 1a 95 0d e3 80 83 89 88 6b 00 20 60 dc 9d 8c 87 2b 1b 72 64 c2 5f e2 19 0a 8d 97 80 56 e6 bc f9 b4 dc 32 8f 55 f5 26 f1 77 69 f0 4b 47 ca 59 b1 a0 dc ab e3 e2 ef 07 f5 f7 96 1d a4 91 68 91 16 13 06 ef 5c dd 85 d4 0c ef e5 86 1d 66 67 a1 65 b8 d8 02 ea 3a a2 d0 f0 00 21 c6 1b 4b 4f b1 8d f3 5f a7 69 5a c6 1e f4 f8 d4 1d 76 92 f5 39 3e Data Ascii: L\PDj2$1.2$s9qixGY8x~)UmZlAcKn\|Xw<oE_.Q~^`W*WB$ 8k `+rd_V2U&wiKGYh\fge:!KO_iZv9>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	49797	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	415	OUT	GET /group/files/page/737/HPMS10.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:40 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: image/jpeg Content-Length: 33965 Connection: close Server: nginx Last-Modified: Wed, 09 Oct 2024 01:54:49 GMT ETag: "6705e269-84ad" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 03 03 04 03 03 03 03 03 02 02 03 04 03 03 04 04 04 04 04 02 03 05 05 04 04 05 04 04 04 04 ff db 00 43 01 01 01 01 01 01 01 02 01 01 02 04 03 02 03 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 ff c0 00 11 08 00 a8 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC@"}!1AQa"q2
2024-10-30 02:47:40 UTC	1509	IN	Data Raw: bb f1 6b 78 92 1b df 87 37 ff 00 b7 c6 a7 e3 3f 10 fc 5c 93 45 d4 2f ed a0 d3 74 7f 16 c9 7e b2 e8 52 c5 23 42 2e 66 b7 68 e5 bd 5b 77 90 ef 25 88 e5 3e 32 fc 1b f0 9d a6 ab f0 ab 67 ec af fb 02 78 28 ea 9e 3e ba f0 ae 7e 0f fe d5 de 21 d7 fc 2b e2 9c 5a e9 57 5f f0 8b 78 ae ed ed 96 7b 2f 0a fa eb 9f eb 62 94 4f fb a1 4f f1 c7 c0 bf 0d 5a fc 63 f8 7f a5 bf ec 9f ff 00 04 e4 16 de 33 b4 d6 b4 8d 5b c2 be 14 fd af bc 45 7f f0 83 c7 11 da ea 04 c5 17 c4 1d 52 38 3c fd 16 d7 4f 11 b9 d2 ee ad a3 67 bd 8e 1f 9b 69 90 15 f1 70 af 15 46 9c 28 d7 92 9c 62 e5 ad ea ab a7 bf fc be 6b 65 ae f6 fb cc 71 74 70 15 7d a5 57 49 a6 e5 4e 5f f2 eb 47 4e ed 2f e0 f5 6d 6d 6b 76 77 39 ef 80 3f 00 b5 cd 7b e1 37 c2 7d 72 6f d9 23 f6 6d f1 1a ea 5e 0c d4 c5 af 89 3e 23 7e db Data Ascii: kx7?\E/t~R#B.fh[w%>2gx(>~!+ZW_x{/bOOZc3[ER8<OgipF(bkeqtp}WIN_GN/mmkvw9?{7}ro#m^>#~
2024-10-30 02:47:40 UTC	16384	IN	Data Raw: d0 f5 2b 96 d1 5f 53 b6 b9 fe dc b6 fb 2d af da 2c de e3 fb 32 58 bf d4 bc c8 e3 fe 3d 9d 5a 58 bc af 25 55 15 b6 d7 a3 5e 14 b0 f2 55 e1 46 3a c7 f9 6e a2 d2 71 ba 5e 6a 6d 4a cd 3e 5b da 48 f9 dc 2e 7f 9a e6 58 27 95 47 17 56 12 52 69 c6 32 6b da a7 38 d5 51 9c ef 65 ca e0 a5 4e f1 9a e7 51 7c aa dc d1 f4 f5 f1 a7 8b f5 bf 11 69 3a cf 8d 35 4d 39 a3 f0 8f 89 05 ee b3 69 e1 1d 3a 44 d2 a4 95 ee 04 4d a8 24 41 51 59 a5 79 65 8e 38 a3 42 61 f2 9f cb 54 8d a3 66 fa 6a ce f4 48 04 8a 5b 53 b3 7b 5f b6 2f d9 ad 4e a1 6f 75 6a df bd 1e 58 4d c5 d1 fc bf fd 0f fb 95 f3 4e b9 a0 e9 96 f0 69 3a e6 8d 79 a2 5a 41 73 a2 2d eb 25 96 a5 fd a9 e1 59 25 31 cd 69 79 0d 85 fe f6 59 9c 4c 8a f3 64 11 14 af e4 af 08 8a 38 5d 13 5c b9 d2 74 44 49 b5 ad 6a c7 4d b5 ba 17 57 Data Ascii: +_S-,2X=ZX%U^UF:nq^jmJ>[H.X'GVRi2k8QeNQ\|i:5M9i:DM$AQYye8BaTfjH[S{_/NoujXMNi:yZAs-%Y%1iyYLd8]\tDIjMW
2024-10-30 02:47:40 UTC	529	IN	Data Raw: 74 ff 00 11 d1 3f c6 3d 1c 5e 66 3b 24 5c 27 52 80 01 8c 0c 7e 95 e7 3e 24 f8 ef 21 d4 ec 63 b3 d1 82 92 4a 83 b7 81 c9 c5 14 57 9b 85 cb f0 b8 6c 6d 3a 94 a3 69 59 6b f7 9d f5 73 cc 56 68 eb 52 c4 c2 09 27 a7 2c 6d fa be c3 2c be 31 eb 33 36 a8 f1 78 6f 4c 41 a7 e9 c4 ae 57 04 75 ed f9 57 dc d6 0b e1 99 3f 61 5d 3b e3 80 f0 ce a8 3e 25 c9 e3 d3 a5 9f f8 99 e7 c3 5a 65 bd a5 f0 81 4d d7 6f df 8c ff 00 a9 ff 00 96 b4 51 5f a4 65 9e f3 ac a5 ff 00 3e e5 fa 1f 3d 52 31 4f 99 2d 6e 7c 57 a8 7c 5f f1 16 9f a7 78 83 51 3e 1b d0 b3 a7 f1 a7 69 da 8a 37 f6 7f a7 a7 ef 6b 8a d4 fe 3d 78 c9 ef 34 fd 29 f4 3f 01 18 f5 1d 3a db 50 fb 71 d1 b2 a0 7d 9f ed 1d 31 8a 28 af 12 58 3a 18 b8 af 6c b6 ed e7 ff 00 0c 71 e2 f1 75 b0 6a 2e 85 97 35 ef a7 6b 7f 99 c3 df 7c 50 d7 Data Ascii: t?=^f;$\'R~>$!cJWlm:iYksVhR',m,136xoLAWuW?a];>%ZeMoQ_e>=R1O-n\|W\|_xQ>i7k=x4)?:Pq}1(X:lquj.5k\|P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	49798	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:39 UTC	414	OUT	GET /group/files/page/737/HALEX.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:40 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:39 GMT Content-Type: image/png Content-Length: 18093 Connection: close Server: nginx Last-Modified: Mon, 26 Feb 2024 04:59:47 GMT ETag: "65dc1ac3-46ad" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	15544	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 50 00 00 00 64 08 06 00 00 00 d0 74 68 d6 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 2e 7a 54 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 00 08 99 33 32 30 32 d2 35 34 d0 35 30 0f 31 b0 b4 32 34 b7 32 b0 d0 36 30 b0 32 30 00 00 41 90 05 0f b7 e2 c0 6c 00 00 00 2e 7a 54 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 00 08 99 33 32 30 32 d2 35 34 d0 35 30 0f 31 b0 b4 32 34 b7 32 b0 d0 36 30 b0 32 30 00 00 41 90 05 0f 9e dd 68 e4 00 00 00 22 7a 54 58 Data Ascii: PNGIHDRPdthgAMAa cHRMz&u0`:pQ<pHYs+bKGDC.zTXtdate:create3202545012426020Al.zTXtdate:modify3202545012426020Ah"zTX
2024-10-30 02:47:40 UTC	1509	IN	Data Raw: 1b 9d 3f 8f 1f 66 e3 f1 8e 43 42 a8 69 73 cf 4e d2 32 ab 4d 1c c1 2e 97 0f 05 75 03 a2 26 c6 4a 77 ce ad a9 8b d8 a7 ad a2 a1 06 dd 1a 55 d1 de c9 3a cb 41 44 e6 cb 47 16 a0 39 40 73 a6 df 9a fc 2b 4f b3 c0 e9 44 14 80 28 20 2d 46 09 4d 7e c5 5d ce 85 66 4b 9a 96 d9 82 49 6c 6a 16 54 6f d2 cf 1d aa 97 a6 7c 4a 6a 83 c7 c7 2c 4e 2f 35 72 a6 f9 a5 1a ac 5d 94 6e 4e 74 bb a6 3d 61 2c b4 f1 4a 19 72 4b 1d bb 0e e7 ee f6 74 7d e8 7c d6 9c 39 8e 85 ee c7 16 5e 54 35 e5 d4 7d 14 d4 8b 15 e5 a6 c0 d4 1c 5a ab 4c ee e7 d5 97 f9 b2 f8 7a 55 9b 02 c2 a8 5f 57 74 7b ec cc 0f 2d 95 7a 52 80 80 1a 82 fc 5b 68 dc 22 33 9d e6 21 22 ed 85 3a 0e 35 3f f6 0f ba dc 73 40 c5 c1 bd ff 13 c2 93 32 1c ae 8d 9a 0a 87 36 fd 39 60 a4 68 22 2d cc df b8 78 6e 3a dd f5 e1 95 74 c2 f3 Data Ascii: ?fCBisN2M.u&JwU:ADG9@s+OD( -FM~]fKIljTo\|Jj,N/5r]nNt=a,JrKt}\|9^T5}ZLzU_Wt{-zR[h"3!":5?s@269`h"-xn:t
2024-10-30 02:47:40 UTC	1040	IN	Data Raw: bc 9e 19 2c 84 89 9f 76 1e 22 4a 7d a2 12 d9 ac e6 c8 cf 0b 54 62 4b 1a 72 c3 8d bf 41 d7 a4 8a b4 b4 e0 70 68 3b 00 61 ee 5e ec bf d5 a9 5c 01 1d 6e 9d 7b 3b bd 89 cc d7 8b ac 81 7e 85 90 76 47 b3 64 d2 34 c7 1f 82 64 21 d4 3c a7 2f 86 ad 45 77 9e 86 84 a6 eb 20 13 9b ca 31 a9 21 88 f9 c6 a5 e8 7a ff d2 7b c2 93 a6 24 26 73 9d b4 4a aa dc 22 1f 29 05 5c aa 4f 1a 05 2b f7 53 6f 85 67 42 58 38 2e 77 1d c6 b3 a2 16 84 f0 24 28 71 bf de ea 05 70 19 3c 81 67 3b 2d 28 a8 e6 fd 6a bf 1f 10 ea 72 83 2b d0 a8 d1 76 eb b3 bb 65 e1 f9 1f 41 d6 40 bf 42 a8 16 9f e6 10 0a b4 77 86 e9 bc 49 28 5b 80 a6 a4 ef fa 5d f0 dd b0 1b 51 f7 fd b8 4f 2a 99 e9 34 4d 71 51 93 aa a8 3c 72 00 2a 0d ef 8f c2 a5 d2 77 61 e7 e9 30 fe de 81 c7 5b f6 f3 f6 94 13 4a 13 ce 95 68 dc 00 75 Data Ascii: ,v"J}TbKrAph;a^\n{;~vGd4d!</Ew 1!z{$&sJ")\O+SogBX8.w$(qp<g;-(jr+veA@BwI([]QO4MqQ<rwa0[Jhu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	49807	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	414	OUT	GET /group/files/page/737/HALEX.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:40 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: image/jpeg Content-Length: 34661 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-8765" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 Data Ascii: JFIF,,"ExifMM*ICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<w
2024-10-30 02:47:40 UTC	1509	IN	Data Raw: 6f 87 74 f3 7f 71 af 5a dc 45 79 a9 dc 58 db 5a 4b 0b a9 6f 25 45 9e 90 08 08 ca 02 a8 df 20 38 01 31 32 f2 77 02 7e 52 fd 8a c0 83 f6 d4 8e 67 12 4a c9 ac 5d 46 55 d4 28 90 0f b4 fd 0a 8e 46 30 78 c7 15 ad fb 32 7e d1 1a e7 8f bc 37 e1 cd 3e eb 5e 79 35 9b ef 12 ea 52 5f da c5 04 71 95 b2 16 16 82 29 18 ac 7c 2b 48 00 e5 80 63 08 1c 90 05 60 7e c5 49 2d 97 ed d2 90 aa 0d 97 1a b5 c4 11 b1 3e 52 b0 f2 e6 e0 13 8e fc 64 67 ad 78 bf 57 9d 2f 6a a7 a5 e1 d3 e6 7b 11 ad 1a 8e 0e 3d 1f f9 1f a0 29 a0 cb e2 93 e2 fd 36 12 b1 cb 2f 88 9c ab ca 7e 52 a0 cc e4 f1 9e 70 87 03 b9 c0 ae 83 c6 57 6d e1 ff 00 8f fe 30 8e 35 8e 49 6d f5 4d a8 fd 63 38 50 3a fa 0c e7 a7 41 59 be 1c d3 a2 bb f8 97 ae 5b 99 24 85 57 c5 62 48 9e 5f 98 f9 8b 24 c6 30 c1 b8 23 78 50 c0 76 cd Data Ascii: otqZEyXZKo%E 812w~RgJ]FU(F0x2~7>^y5R_q)\|+Hc`~I->RdgxW/j{=)6/~RpWm05ImMc8P:AY[$WbH_$0#xPv
2024-10-30 02:47:40 UTC	16384	IN	Data Raw: af 44 58 34 49 e4 00 3d b4 d0 4a 5d 22 75 03 e5 dd 1a bc 79 dc 49 11 c3 c6 08 61 d7 78 6a f9 ad 3c 62 56 2b 4f b7 4c fa 91 0b 1e e0 0e 08 bd 04 77 eb b7 f0 c5 78 5f 8f ee bc 37 17 c6 9d 0f 47 d1 e5 d7 a4 f1 27 c3 ff 00 18 a5 fd a5 c5 cc d0 c1 e7 c4 23 85 99 05 c6 03 cc 59 d1 11 f0 36 a6 df 5d 8c 7d e7 c2 30 4a be 36 59 56 dd e7 b9 76 17 02 1c 72 4c 9f 6c ce d0 43 16 ce 5b ee e7 a6 46 47 35 8e 5b 9b 7b 6a af 09 3f 8d 37 f7 6b 63 f1 1f 11 23 81 a5 9d 4e 38 59 29 4a 51 bc b9 76 bf 32 5a f6 7b fe 67 b7 fc 3c d5 ad 64 f0 dd d4 ea 21 b6 b7 d3 65 fb 09 78 c3 31 9e 76 90 33 b3 0c 10 31 b4 00 41 3f 79 bd 78 fc 30 fd a7 74 54 f0 8f ed 89 f1 47 4f f9 91 20 f1 2d c4 a1 5b a8 42 66 90 13 f8 94 af dc 9b df 88 8f 07 c3 1f b3 c3 62 b2 fd 97 51 da ad 12 79 aa e4 49 b4 b1 Data Ascii: DX4I=J]"uyIaxj<bV+OLwx_7G'#Y6]}0J6YVvrLlC[FG5[{j?7kc#N8Y)JQv2Z{g<d!ex1v31A?yx0tTGO -[BfbQyI
2024-10-30 02:47:40 UTC	1225	IN	Data Raw: 6d 8c 00 88 ed ed 90 45 1c 7f 40 38 fc 7a f0 0f 5e 6a 48 fc 27 69 6e ff 00 2d b2 0d a7 39 29 c9 a2 8a e9 a3 42 94 67 75 15 f7 1b d6 94 d2 b2 93 2e d9 41 f6 7b 9f 95 76 f2 0f 5e 98 a9 7c 47 ad 59 f8 5b 46 bc d4 b5 29 e3 b5 b0 b1 86 4b 8b 99 e5 3b 52 de 38 d4 b3 bb 93 c2 85 50 49 27 8c 7a f4 a2 8a f5 7d 9c 63 1d 0f 27 99 ca 5a 9f 9e ff 00 f0 52 ef 88 f7 df 1e fe 06 6b 5e 1f fb 5e a1 a6 e9 57 97 56 ab ac e9 d6 8c 45 f1 b4 f3 50 da e9 48 a0 ff 00 c7 dd cc 8d 19 70 14 ec 91 a1 46 04 5b c8 c7 c4 bc 09 e0 0b 3f 8b 9f b4 af 86 7e 13 dc 6a 9a 0c 36 bf 09 9e 3d 53 c5 cd 6f a8 41 1c 77 1a c0 b7 54 68 a1 47 ba 86 66 b5 d3 ad d2 3b 58 99 19 b6 24 72 37 47 a2 8a f9 aa 1f bc 9b e6 fe 6b 7c 8f a2 a9 fb ba 4b 97 b3 3d 3f f6 e7 fd b0 f4 fb 9d 1a ff 00 4c f0 5f c7 4f 04 ea Data Ascii: mE@8z^jH'in-9)Bgu.A{v^\|GY[F)K;R8PI'z}c'ZRk^^WVEPHpF[?~j6=SoAwThGf;X$r7Gk\|K=?L_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49809	63.140.62.17	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	1170	OUT	GET /b/ss/hphplaza-corporate,hphglobal-test/1/H.21/s88884942141825?AQB=1&pccr=true&vidn=3390CF2595BB7DD7-40001FF24355CD74&ndh=1&t=29/9/2024%2022%3A47%3A30%202%20240&ce=UTF-8&ns=harbourplazahotel&pageName=group%3Aen%3Astaff-offer&g=https%3A//www.harbour-plaza.com/group/en/staff-offer&cc=HKD&events=event4&c12=Wednesday&v17=Wednesday&v21=group&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1 HTTP/1.1 Host: harbourplazahotel.122.2o7.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_vi=[CS]v1\|3390CF2595BB7DD7-40001FF24355CD74[CE]
2024-10-30 02:47:40 UTC	699	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Wed, 30 Oct 2024 02:47:40 GMT expires: Tue, 29 Oct 2024 02:47:40 GMT last-modified: Thu, 31 Oct 2024 02:47:40 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_vi=[CS]v1\|3390CF2595BB7DD7-40001FF24355CD74[CE]; Path=/; Domain=harbourplazahotel.122.2o7.net; Max-Age=63072000; Expires=Fri, 30 Oct 2026 02:47:47 GMT; SameSite=None; Secure etag: 3715697455001960448-4618418962190767365 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-30 02:47:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.7	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024740Z-16849878b7867ttgfbpnfxt44s000000076000000000sbqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.7	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 860a7776-a01e-00ab-0afb-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024740Z-r197bdfb6b4skzzvqpzzd3xetg00000006yg0000000017wv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.7	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024740Z-16849878b78sx229w7g7at4nkg00000005n000000000k4ke x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.7	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024740Z-15b8d89586f42m673h1quuee4s0000000bk0000000005x6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	49808	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	412	OUT	GET /group/files/page/737/RGH.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:40 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: image/jpeg Content-Length: 44367 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:58 GMT ETag: "65e6e616-ad4f" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 11 6a 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 1a 40 00 00 01 01 00 03 00 00 00 01 11 80 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0f 00 02 00 00 00 06 00 00 00 bc 01 10 00 02 00 00 00 0c 00 00 00 c2 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 ce 01 1b 00 05 00 00 00 01 00 00 00 d6 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 de 01 32 00 02 00 00 00 14 00 00 00 fc 87 69 00 04 00 00 00 01 00 00 01 10 00 00 03 58 00 08 00 08 00 08 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 00 00 24 9f 00 00 00 27 10 00 24 9f 00 00 00 27 10 41 64 6f Data Ascii: JFIFjExifMM*@(12iXCanonCanon EOS R$'$'Ado
2024-10-30 02:47:40 UTC	1509	IN	Data Raw: 20 63 72 73 3a 53 70 6c 69 74 54 6f 6e 69 6e 67 42 61 6c 61 6e 63 65 3d 22 30 22 20 63 72 73 3a 50 61 72 61 6d 65 74 72 69 63 53 68 61 64 6f 77 73 3d 22 30 22 20 63 72 73 3a 50 61 72 61 6d 65 74 72 69 63 44 61 72 6b 73 3d 22 30 22 20 63 72 73 3a 50 61 72 61 6d 65 74 72 69 63 4c 69 67 68 74 73 3d 22 30 22 20 63 72 73 3a 50 61 72 61 6d 65 74 72 69 63 48 69 67 68 6c 69 67 68 74 73 3d 22 30 22 20 63 72 73 3a 50 61 72 61 6d 65 74 72 69 63 53 68 61 64 6f 77 53 70 6c 69 74 3d 22 32 35 22 20 63 72 73 3a 50 61 72 61 6d 65 74 72 69 63 4d 69 64 74 6f 6e 65 53 70 6c 69 74 3d 22 35 30 22 20 63 72 73 3a 50 61 72 61 6d 65 74 72 69 63 48 69 67 68 6c 69 67 68 74 53 70 6c 69 74 3d 22 37 35 22 20 63 72 73 3a 53 68 61 72 70 65 6e 52 61 64 69 75 73 3d 22 2b 31 2e 30 22 20 63 Data Ascii: crs:SplitToningBalance="0" crs:ParametricShadows="0" crs:ParametricDarks="0" crs:ParametricLights="0" crs:ParametricHighlights="0" crs:ParametricShadowSplit="25" crs:ParametricMidtoneSplit="50" crs:ParametricHighlightSplit="75" crs:SharpenRadius="+1.0" c
2024-10-30 02:47:41 UTC	16384	IN	Data Raw: 42 44 45 35 37 32 36 32 35 30 43 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 41 34 45 42 44 33 33 45 36 44 35 45 39 31 31 42 37 37 45 42 42 44 45 35 37 32 36 32 35 30 43 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 38 42 34 45 42 44 33 33 45 36 44 35 45 39 31 31 42 37 37 45 42 42 44 45 35 37 32 36 32 35 30 43 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 31 38 46 39 30 33 38 35 35 44 35 45 39 31 31 39 32 35 32 45 41 31 36 43 31 39 34 41 46 46 39 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 41 32 38 46 39 30 33 38 35 35 44 35 45 39 31 31 39 32 35 32 Data Ascii: BDE5726250C</rdf:li><rdf:li>xmp.did:8A4EBD33E6D5E911B77EBBDE5726250C</rdf:li><rdf:li>xmp.did:8B4EBD33E6D5E911B77EBBDE5726250C</rdf:li><rdf:li>xmp.did:A18F903855D5E9119252EA16C194AFF9</rdf:li><rdf:li>xmp.did:A28F903855D5E9119252
2024-10-30 02:47:41 UTC	10931	IN	Data Raw: 96 9f 7d e2 0d 32 58 1a 79 a6 44 fb 3c 2c 0a b9 1b d8 06 72 ac 55 40 cf 27 76 30 a6 b2 ab 2b c7 51 45 3e 6d 0f 86 fc 1b e2 49 35 7f 14 1b 3b 68 6e a6 db 1e d9 26 45 06 08 89 65 61 13 31 20 f9 8c 00 60 00 23 68 62 48 ca 86 e4 b4 ff 00 83 5e 32 b8 fd a7 fe 2e eb 11 f8 4f c4 77 3a 1e a4 1a f2 d7 51 83 4e 9a 6b 49 b6 46 48 22 54 52 9f c2 3b f1 5e cf e1 8d 07 c3 49 23 7d 9f 5d b7 d3 3c c2 36 1b 67 8d b6 92 08 dc 15 47 6c f6 20 e3 80 45 56 f0 0f c4 6d 43 c1 da 85 cd c5 be 9f 0c cb 6d 21 85 12 ea c2 29 de e9 40 56 f3 21 25 87 92 77 61 77 65 58 ec 61 90 08 6a e0 8c 60 d7 2b 67 74 67 28 bb d8 c1 fd 94 44 7e 24 fd ba 7c 73 6f 1c 88 4c df d9 8b f7 ba 0f ec d9 8e 7f 9f e5 5a df 06 a2 8f 53 f1 57 85 74 b5 81 84 d6 f7 77 1f 32 b4 3b 67 31 ee 97 0d f2 6f 60 a8 5f 39 73 Data Ascii: }2XyD<,rU@'v0+QE>mI5;hn&Eea1 `#hbH^2.Ow:QNkIFH"TR;^I#}]<6gGl EVmCm!)@V!%waweXaj`+gtg(D~$\|soLZSWtw2;g1o`_9s

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024740Z-16849878b78x6gn56mgecg60qc000000093g00000000ta22 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:40 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	49810	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	713	OUT	GET /group/files/hotel_brands/4/bdd61253-01cf-4857-a56e-2d89bad0f4e6.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:41 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: image/png Content-Length: 10846 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-2a5e" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4a 00 00 00 96 08 06 00 00 00 b8 a2 c1 e5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDRJtEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53
2024-10-30 02:47:41 UTC	2742	IN	Data Raw: 75 51 94 04 4a d1 46 d9 46 92 41 a5 7e 54 ff ac 1c 5c 07 5e bf 51 92 9e 9f 4f 8c 6b 03 08 6b b0 83 7f 9b 93 50 07 4b 7a b6 1a 17 5e a4 84 bc b4 00 ed 39 4e dc eb 90 4f 90 74 fb 28 56 eb c0 e3 08 4f 3a 3c d0 17 90 24 2b 42 54 e5 27 49 7a 3b 39 54 4d 90 ea c1 bc de d1 86 2a ff 0b 25 57 4c 1c ff 96 ec 39 66 e0 01 86 83 ac 07 25 26 84 03 cd 57 2a a9 79 28 f6 ed 6a 73 8d c5 94 2a fd e7 7f 56 52 53 83 65 0b 70 48 20 3c 05 29 aa 10 ee 81 e4 0e 5f 50 6a 42 0c dc 5d 94 9a ae b3 08 f2 56 de e3 45 11 48 12 64 00 6f f3 5f 0a 44 92 f0 f4 07 65 f3 76 79 47 fb 92 24 31 49 c0 89 f3 a0 84 3b 6b 20 29 1f c3 e7 3b cb 38 0e bb 2e c2 83 60 4b c4 aa 8d 93 48 92 ef 72 d2 80 57 17 f1 88 cf 67 91 24 85 ef 11 93 2b 96 21 c2 51 85 48 05 24 46 a9 af d4 52 70 6c 49 55 3f eb 9a 72 9d Data Ascii: uQJFFA~T\^QOkkPKz^9NOt(VO:<$+BT'Iz;9TM%WL9f%&Wy(js*VRSepH <)_PjB]VEHdo_DevyG$1I;k );8.`KHrWg$+!QH$FRplIU?r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.7	49813	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	713	OUT	GET /group/files/hotel_brands/3/e559066b-4a46-47a9-9864-4e24bb8f4e04.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:41 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:40 GMT Content-Type: image/png Content-Length: 5182 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-143e" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	5182	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 4c 08 06 00 00 00 91 6d 7e 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRLm~tEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.7	49817	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:40 UTC	412	OUT	GET /group/files/page/737/ROH.jpg HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D
2024-10-30 02:47:41 UTC	841	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: image/jpeg Content-Length: 45723 Connection: close Server: nginx Last-Modified: Tue, 05 Mar 2024 09:29:56 GMT ETag: "65e6e614-b29b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	15543	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 10 a0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0e 01 00 00 03 00 00 00 01 1a 40 00 00 01 01 00 03 00 00 00 01 11 80 00 00 01 02 00 03 00 00 00 03 00 00 00 b6 01 06 00 03 00 00 00 01 00 02 00 00 01 0f 00 02 00 00 00 06 00 00 00 bc 01 10 00 02 00 00 00 0c 00 00 00 c2 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 ce 01 1b 00 05 00 00 00 01 00 00 00 d6 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 de 01 32 00 02 00 00 00 14 00 00 00 fc 87 69 00 04 00 00 00 01 00 00 01 10 00 00 03 58 00 08 00 08 00 08 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 52 00 00 24 9f 00 00 00 27 10 00 24 9f 00 00 00 27 10 41 64 6f Data Ascii: JFIFExifMM*@(12iXCanonCanon EOS R$'$'Ado
2024-10-30 02:47:41 UTC	10458	IN	Data Raw: 61 95 b7 00 9a 3a 87 00 61 95 b7 00 9a 3a 87 00 61 95 b7 00 9a 3a 87 00 05 00 62 e9 86 00 9a 59 c7 00 66 17 e4 00 9a 51 f7 00 66 17 e4 00 9a 51 f7 00 04 00 6a fd aa 00 9a 80 d6 00 6a fd aa 00 9a 80 d6 00 6a fd aa 00 9a 80 d6 00 04 00 74 30 e2 00 9a af b6 00 74 30 e2 00 9a af b6 00 74 30 e2 00 9a af b6 00 04 00 73 fc 27 00 9e 7c 52 00 73 fc 27 00 9e 7c 52 00 73 fc 27 00 9e 7c 52 00 04 00 57 5a db 00 9e 49 8b 00 57 5a db 00 9e 49 8b 00 57 5a db 00 9e 49 8b 00 04 00 57 49 47 00 9e 16 c3 00 57 49 47 00 9e 16 c3 00 57 49 47 00 9e 16 c3 00 04 00 52 ea 42 00 9d fb 6c 00 52 ea 42 00 9d fb 6c 00 52 ea 42 00 9d fb 6c 00 04 00 52 9e 18 00 9e 41 bb 00 52 9e 18 00 9e 41 bb 00 52 9e 18 00 9e 41 bb 00 04 00 32 18 ce 00 9d ef b4 00 32 18 ce 00 9d ef b4 00 32 18 ce 00 9d Data Ascii: a:a:a:bYfQfQjjjt0t0t0s'\|Rs'\|Rs'\|RWZIWZIWZIWIGWIGWIGRBlRBlRBlRARARA222
2024-10-30 02:47:41 UTC	16384	IN	Data Raw: 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 47 72 65 65 6e 3e 0d 0a 09 09 09 3c 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 42 6c 75 65 3e 0d 0a 09 09 09 09 3c 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 30 2c 20 30 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 09 3c 72 64 66 3a 6c 69 3e 32 35 35 2c 20 32 35 35 3c 2f 72 64 66 3a 6c 69 3e 0d 0a 09 09 09 09 3c 2f 72 64 66 3a 53 65 71 3e 0d 0a 09 09 09 3c 2f 63 72 73 3a 54 6f 6e 65 43 75 72 76 65 50 56 32 30 31 32 42 6c 75 65 3e 0d 0a 09 09 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0d 0a 09 3c 2f 72 64 66 3a 52 44 46 3e 0d 0a 3c 2f 78 3a 78 6d Data Ascii: 255</rdf:li></rdf:Seq></crs:ToneCurvePV2012Green><crs:ToneCurvePV2012Blue><rdf:Seq><rdf:li>0, 0</rdf:li><rdf:li>255, 255</rdf:li></rdf:Seq></crs:ToneCurvePV2012Blue></rdf:Description></rdf:RDF></x:xm
2024-10-30 02:47:41 UTC	3338	IN	Data Raw: 2a d2 f8 0a b7 1f b3 a7 88 20 1f e8 7a c6 93 71 b4 fd e9 e3 9a dc ff 00 e3 ab 20 fd 6b 9c d4 fe 12 f8 9a 28 5c 5b dd 78 7b 50 60 58 62 de ff 00 6e 09 27 00 b4 88 8b 9f f8 15 3f 53 f8 89 e2 0f 13 37 97 77 34 ce ad c0 81 94 05 3e 9f ba 1c 7b 82 e7 38 e3 39 ad 3d 27 5c b9 8d 95 a4 55 55 53 b4 36 fe 57 d8 1e 83 3f dd 51 cf b5 73 d4 a3 4d ab 46 e7 a3 46 8c d6 b3 68 f3 8f 86 3f 0b fc 71 e1 4f 19 78 92 4d 53 c2 fa c4 6b 79 2c 2f 0b c1 10 ba 8e 45 0b 8c 86 84 ba fe b5 de 4f a7 ea c9 c4 9a 36 b1 1b 76 0d 65 28 cf fe 3b 5d 44 7e 34 5b 48 36 b4 0d b8 8c ac 61 be 69 3b f4 e4 e0 fa b6 48 aa f3 7c 45 8e e2 49 23 dd 30 64 c3 cb b5 f1 12 e3 1c bb ff 00 17 ca 43 11 d3 83 5c df 54 51 5a 17 28 dd dc e1 6f ee da d5 8f da 23 9a 1d a7 07 cc 8c a6 3f 3a 8c 6a d1 ca bc 48 ad f4 Data Ascii: * zq k(\[x{P`Xbn'?S7w4>{89='\UUS6W?QsMFFh?qOxMSky,/EO6ve(;]D~4[H6ai;H\|EI#0dC\TQZ(o#?:jH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	49819	216.58.206.68	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	1178	OUT	GET /pagead/1p-user-list/945566240/?random=1730256450177&cv=9&fst=1730253600000&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&tiba=CK%20Group%20Staff%20Offer&hn=www.googleadservices.com&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dPgAoq2Jc171ibumBwXdpK8CwaJudRg&random=221110481&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 02:47:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 02:47:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: cfe50472-201e-00aa-2cfd-263928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024741Z-17c5cb586f6f8m6jnehy0z65x400000006pg000000009zrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024741Z-15b8d89586fxdh48ft0acdbg44000000015000000000cn3y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024741Z-16849878b78qwx7pmw9x5fub1c00000005n0000000004z8r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.7	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 862c7620-501e-0029-4f4f-29d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024741Z-15b8d89586fxdh48ft0acdbg4400000001b000000000078c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	49828	46.228.164.13	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	411	OUT	GET /r/dft/id/L21rdC8xMDk4L3BpZC84Njc2MzQ5OC90LzA HTTP/1.1 Host: d.turn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=3921844034577116075
2024-10-30 02:47:41 UTC	409	IN	HTTP/1.1 200 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: private, max-age=7200 pragma: cache set-cookie: uid=3921844034577116075; Domain=.turn.com; Expires=Mon, 28-Apr-2025 02:47:41 GMT; Path=/; Secure; SameSite=None content-type: application/javascript transfer-encoding: chunked date: Wed, 30 Oct 2024 02:47:40 GMT connection: close
2024-10-30 02:47:41 UTC	961	IN	Data Raw: 31 45 36 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 64 28 61 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 63 2e 70 72 6f 74 6f 74 79 70 65 29 61 5b 62 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 5b 62 5d 3b 72 65 74 75 72 6e 20 61 7d 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3d 62 2c 61 2e 65 78 70 6f 72 74 73 3d 63 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 7c 7c 7b 7d 2c 28 74 Data Ascii: 1E61!function(){var a=void 0,b=function(a,b){function c(a){return a?d(a):void 0}function d(a){for(var b in c.prototype)a[b]=c.prototype[b];return a}return a.exports=b,a.exports=c,c.prototype.on=function(a,b){return this._callbacks=this._callbacks\|\|{},(t
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 65 3e 64 3b 2b 2b 64 29 63 5b 64 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 62 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 7c 7c 7b 7d 2c 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 5b 61 5d 7c 7c 5b 5d 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 28 61 29 2e 6c 65 6e 67 74 68 7d 2c 61 2e 65 78 70 6f 72 74 73 7d 28 7b 7d 2c 7b 7d 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b Data Ascii: c.length;e>d;++d)c[d].apply(this,b)}return this},c.prototype.listeners=function(a){return this._callbacks=this._callbacks\|\|{},this._callbacks[a]\|\|[]},c.prototype.hasListeners=function(a){return!!this.listeners(a).length},a.exports}({},{}),c=function(b,c){
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 7d 63 61 74 63 68 28 65 29 7b 64 28 6a 28 65 29 29 7d 7d 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 63 5b 32 5d 3b 74 72 79 7b 65 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 3f 66 28 61 29 3a 61 29 7d 63 61 74 63 68 28 67 29 7b 65 28 67 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 3f 61 3a 61 3d 3d 3d 4f 62 6a 65 63 74 28 61 29 26 26 22 74 68 65 6e 22 69 6e 20 61 3f 67 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 44 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 61 2e 74 68 65 6e 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: }catch(e){d(j(e))}},b)}function l(a){return new c(function(b,c,d,e){var f=c[2];try{e("function"==typeof f?f(a):a)}catch(g){e(g)}})}function m(a){return a instanceof c?a:a===Object(a)&&"then"in a?g(function(b,c,d){D(function(){try{var e=a.then;"function"==
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 29 7b 76 61 72 20 64 3d 49 28 48 2c 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b 72 65 74 75 72 6e 20 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 65 3d 62 2e 6c 65 6e 67 74 68 2c 64 5b 30 5d 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 64 2c 66 29 7b 72 65 74 75 72 6e 20 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 64 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 62 2c 61 2c 66 2c 65 29 7d 29 7d 29 7d 2c 47 2e 61 70 70 6c 79 28 62 2c 64 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 65 3a 22 72 65 Data Ascii: ){var d=I(H,arguments,1);return a(b,function(b){var e;return e=b.length,d[0]=function(b,d,f){return a(b,function(b){return a(d,function(a){return c(b,a,f,e)})})},G.apply(b,d)})}function A(a){return{state:"fulfilled",value:a}}function B(a){return{state:"re
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 29 4a 3d 73 65 74 49 6d 6d 65 64 69 61 74 65 2e 62 69 6e 64 28 62 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 29 7b 76 61 72 20 52 3d 6e 65 77 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 3b 52 2e 70 6f 72 74 31 2e 6f 6e 6d 65 73 73 61 67 65 3d 45 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 52 2e 70 6f 72 74 32 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 30 29 7d 7d 65 6c 73 65 20 4a 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 70 72 6f 63 65 73 73 26 26 70 72 6f 63 65 73 73 2e 6e 65 78 74 54 69 63 6b 3f 70 72 6f 63 65 73 73 2e 6e 65 78 74 54 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 4c 28 61 2c 30 29 7d 3b Data Ascii: ypeof setImmediate)J=setImmediate.bind(b);else if("undefined"!=typeof MessageChannel){var R=new MessageChannel;R.port1.onmessage=E,J=function(){R.port2.postMessage(0)}}else J="object"==typeof process&&process.nextTick?process.nextTick:function(a){L(a,0)};
2024-10-30 02:47:41 UTC	1344	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 62 3b 76 61 72 20 64 3d 67 2c 65 3d 63 3b 62 2e 6e 6f 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 64 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 2c 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 64 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 64 65 74 61 63 Data Ascii: nction(a,b){a.exports=b;var d=g,e=c;b.noop=function(){},b.on=function(a,b,c){d.document.addEventListener?a.addEventListener(b,c,!1):a.attachEvent("on"+b,c)},b.removeListener=function(a,b,c){d.document.addEventListener?a.removeEventListener(b,c,!1):a.detac
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 31 39 37 32 0d 0a 3b 76 61 72 20 6b 3b 69 66 28 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6b 28 61 29 7d 2c 76 6f 69 64 20 30 21 3d 3d 64 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 73 6f 6c 76 65 28 64 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 29 7d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 22 2f 2f 64 2e 74 75 72 6e 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 73 69 7a 7a 6c 65 2e 6a 73 22 2c 6d 3d 62 2e 6c 6f 61 64 53 63 72 69 70 74 28 6c 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 Data Ascii: 1972;var k;if(b.querySelector=function(a){return k(a)},void 0!==d.document.querySelector)k=function(a){return e.resolve(d.document.querySelector(a))};else{var l="//d.turn.com/scripts/sizzle.js",m=b.loadScript(l).then(function(){return k=function(a){retu
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 3c 66 29 6c 3d 64 2e 6c 6f 61 64 53 63 72 69 70 74 28 61 2b 68 2b 63 29 2c 6d 2e 70 75 73 68 28 6c 29 3b 65 6c 73 65 20 66 6f 72 28 6b 3d 6a 28 68 2c 66 29 3b 68 3d 6b 2e 70 6f 70 28 29 3b 29 6c 3d 64 2e 6c 6f 61 64 53 63 72 69 70 74 28 61 2b 68 2b 63 29 2c 6d 2e 70 75 73 68 28 6c 29 3b 72 65 74 75 72 6e 20 65 2e 61 6c 6c 28 6d 29 7d 7d 2c 69 3d 62 2e 64 61 74 61 54 6f 51 75 65 72 79 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 2c 64 2c 65 3d 5b 5d 3b 61 2e 6c 65 6e 67 74 68 3b 29 63 3d 61 2e 70 6f 70 28 29 2c 62 3d 61 2e 70 6f 70 28 29 2c 64 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 62 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 29 2c 65 2e 70 75 73 68 28 64 Data Ascii: <f)l=d.loadScript(a+h+c),m.push(l);else for(k=j(h,f);h=k.pop();)l=d.loadScript(a+h+c),m.push(l);return e.all(m)}},i=b.dataToQueryString=function(a){for(var b,c,d,e=[];a.length;)c=a.pop(),b=a.pop(),d=encodeURIComponent(b)+"="+encodeURIComponent(c),e.push(d
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 20 63 3d 5b 5d 3b 72 65 74 75 72 6e 20 70 2e 65 61 63 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 72 65 6a 65 63 74 65 64 22 3d 3d 3d 61 2e 73 74 61 74 65 29 66 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 61 2e 72 65 61 73 6f 6e 29 3b 65 6c 73 65 7b 76 61 72 20 62 3d 61 2e 76 61 6c 75 65 2c 64 3d 62 2e 6b 65 79 2c 65 3d 62 2e 76 61 6c 75 65 3b 2d 31 21 3d 3d 64 26 26 63 2e 70 75 73 68 28 64 2c 65 29 7d 7d 29 2c 61 28 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 62 3d 5b 5d 3b 72 65 74 75 72 6e 20 70 2e 65 61 63 68 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 76 61 72 20 63 3d 71 28 61 29 3b 62 2e 70 75 73 68 28 63 29 7d 63 61 74 63 68 28 64 29 7b 66 2e 65 6d 69 74 28 Data Ascii: c=[];return p.each(b,function(a){if("rejected"===a.state)f.emit("error",a.reason);else{var b=a.value,d=b.key,e=b.value;-1!==d&&c.push(d,e)}}),a(c)}function c(a,c){function d(){var b=[];return p.each(a,function(a){try{var c=q(a);b.push(c)}catch(d){f.emit(
2024-10-30 02:47:41 UTC	1370	IN	Data Raw: 63 6b 65 64 3b 63 61 73 65 22 73 65 6c 65 63 74 65 64 56 61 6c 75 65 22 3a 72 65 74 75 72 6e 20 62 2e 6f 70 74 69 6f 6e 73 5b 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 2e 76 61 6c 75 65 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 64 29 7d 7d 69 66 28 21 28 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 61 5b 30 5d 26 26 61 5b 31 5d 29 29 72 65 74 75 72 6e 20 67 2e 72 65 6a 65 63 74 28 7b 6d 65 73 73 61 67 65 3a 22 49 6e 76 61 6c 69 64 20 65 78 70 72 65 73 73 69 6f 6e 22 2c 64 61 74 61 3a 61 7d 29 3b 76 61 72 20 63 3d 61 5b 30 5d 2c 64 3d 61 5b 31 5d 3b 74 72 79 7b 72 65 74 75 72 6e 20 6f 2e 6d 6f 64 65 3d 3d 3d 6c 2e 64 65 62 75 67 3f 69 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f Data Ascii: cked;case"selectedValue":return b.options[b.selectedIndex].value;default:return b.getAttribute(d)}}if(!(a&&a instanceof Array&&a[0]&&a[1]))return g.reject({message:"Invalid expression",data:a});var c=a[0],d=a[1];try{return o.mode===l.debug?i.parentSelecto

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.7	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024741Z-16849878b78j7llf5vkyvvcehs00000008cg00000000um33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:41 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	49834	63.140.62.27	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	929	OUT	GET /b/ss/hphplaza-corporate,hphglobal-test/1/H.21/s88884942141825?AQB=1&pccr=true&vidn=3390CF2595BB7DD7-40001FF24355CD74&ndh=1&t=29/9/2024%2022%3A47%3A30%202%20240&ce=UTF-8&ns=harbourplazahotel&pageName=group%3Aen%3Astaff-offer&g=https%3A//www.harbour-plaza.com/group/en/staff-offer&cc=HKD&events=event4&c12=Wednesday&v17=Wednesday&v21=group&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&p=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B&AQE=1 HTTP/1.1 Host: harbourplazahotel.122.2o7.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_vi=[CS]v1\|3390CF2595BB7DD7-40001FF24355CD74[CE]
2024-10-30 02:47:41 UTC	699	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Wed, 30 Oct 2024 02:47:41 GMT expires: Tue, 29 Oct 2024 02:47:41 GMT last-modified: Thu, 31 Oct 2024 02:47:41 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_vi=[CS]v1\|3390CF2595BB7DD7-40001FF24355CD74[CE]; Path=/; Domain=harbourplazahotel.122.2o7.net; Max-Age=63072000; Expires=Fri, 30 Oct 2026 02:47:47 GMT; SameSite=None; Secure etag: 3715697457674747904-4618532319903259207 vary: * content-type: image/gif;charset=utf-8 content-length: 43 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-30 02:47:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	49825	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	538	OUT	GET /group/files/hotel_brands/1/ed2969f7-6fc4-4cdb-8a85-042b829c78c3.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D; _ga_GEMX71Y2CB=GS1.1.1730256459.1.0.1730256459.0.0.0; _ga=GA1.1.1773833745.1730256460
2024-10-30 02:47:42 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: image/png Content-Length: 4317 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-10dd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	4317	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b2 00 00 00 4c 08 06 00 00 00 c9 12 ed 01 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRLtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	49826	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:41 UTC	538	OUT	GET /group/files/hotel_brands/2/31d91a76-9bd7-4e36-b5a8-21bb59ce4410.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D; _ga_GEMX71Y2CB=GS1.1.1730256459.1.0.1730256459.0.0.0; _ga=GA1.1.1773833745.1730256460
2024-10-30 02:47:42 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:41 GMT Content-Type: image/png Content-Length: 4113 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-1011" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	4113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 62 00 00 00 4c 08 06 00 00 00 96 03 62 48 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRbLbHtEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:42 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024742Z-16849878b78km6fmmkbenhx76n00000006sg00000000cy13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024742Z-16849878b78fhxrnedubv5byks00000005rg00000000ef18 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 48c2ab4b-a01e-006f-620c-2813cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024742Z-15b8d89586fmc8ck21zz2rtg1w00000004p0000000008rcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024742Z-16849878b78qfbkc5yywmsbg0c000000075g0000000036gx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:42 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:42 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024742Z-16849878b78smng4k6nq15r6s400000008wg00000000k2wq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	49836	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	538	OUT	GET /group/files/hotel_brands/4/bdd61253-01cf-4857-a56e-2d89bad0f4e6.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D; _ga_GEMX71Y2CB=GS1.1.1730256459.1.0.1730256459.0.0.0; _ga=GA1.1.1773833745.1730256460
2024-10-30 02:47:42 UTC	840	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:42 GMT Content-Type: image/png Content-Length: 10846 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-2a5e" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	8104	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4a 00 00 00 96 08 06 00 00 00 b8 a2 c1 e5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDRJtEXtSoftwareAdobe ImageReadyqe<#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53
2024-10-30 02:47:42 UTC	2742	IN	Data Raw: 75 51 94 04 4a d1 46 d9 46 92 41 a5 7e 54 ff ac 1c 5c 07 5e bf 51 92 9e 9f 4f 8c 6b 03 08 6b b0 83 7f 9b 93 50 07 4b 7a b6 1a 17 5e a4 84 bc b4 00 ed 39 4e dc eb 90 4f 90 74 fb 28 56 eb c0 e3 08 4f 3a 3c d0 17 90 24 2b 42 54 e5 27 49 7a 3b 39 54 4d 90 ea c1 bc de d1 86 2a ff 0b 25 57 4c 1c ff 96 ec 39 66 e0 01 86 83 ac 07 25 26 84 03 cd 57 2a a9 79 28 f6 ed 6a 73 8d c5 94 2a fd e7 7f 56 52 53 83 65 0b 70 48 20 3c 05 29 aa 10 ee 81 e4 0e 5f 50 6a 42 0c dc 5d 94 9a ae b3 08 f2 56 de e3 45 11 48 12 64 00 6f f3 5f 0a 44 92 f0 f4 07 65 f3 76 79 47 fb 92 24 31 49 c0 89 f3 a0 84 3b 6b 20 29 1f c3 e7 3b cb 38 0e bb 2e c2 83 60 4b c4 aa 8d 93 48 92 ef 72 d2 80 57 17 f1 88 cf 67 91 24 85 ef 11 93 2b 96 21 c2 51 85 48 05 24 46 a9 af d4 52 70 6c 49 55 3f eb 9a 72 9d Data Ascii: uQJFFA~T\^QOkkPKz^9NOt(VO:<$+BT'Iz;9TM%WL9f%&Wy(js*VRSepH <)_PjB]VEHdo_DevyG$1I;k );8.`KHrWg$+!QH$FRplIU?r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	49838	18.167.161.134	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	538	OUT	GET /group/files/hotel_brands/3/e559066b-4a46-47a9-9864-4e24bb8f4e04.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D; _ga_GEMX71Y2CB=GS1.1.1730256459.1.0.1730256459.0.0.0; _ga=GA1.1.1773833745.1730256460
2024-10-30 02:47:42 UTC	839	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:42 GMT Content-Type: image/png Content-Length: 5182 Connection: close Server: nginx Last-Modified: Wed, 24 May 2023 22:02:03 GMT ETag: "646e895b-143e" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:42 UTC	5182	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 98 00 00 00 4c 08 06 00 00 00 91 6d 7e 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 33 36 30 2c 20 32 30 32 30 2f 30 32 2f 31 33 2d 30 31 3a 30 37 3a 32 32 20 20 Data Ascii: PNGIHDRLm~tEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	49849	142.250.186.132	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:42 UTC	937	OUT	GET /pagead/1p-user-list/945566240/?random=1730256450177&cv=9&fst=1730253600000&num=1&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&tiba=CK%20Group%20Staff%20Offer&hn=www.googleadservices.com&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dPgAoq2Jc171ibumBwXdpK8CwaJudRg&random=221110481&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:42 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 02:47:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 02:47:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.7	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:43 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:43 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024743Z-16849878b7867ttgfbpnfxt44s00000007ag0000000085st x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:43 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.7	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:43 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024743Z-15b8d89586f4zwgbgswvrvz4vs00000008r000000000edch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.7	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:43 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3201f11f-301e-006e-7658-27f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024743Z-17c5cb586f6lxnvg801rcb3n8n000000078g00000000g63a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.7	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:43 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: cd3f31c5-e01e-0033-6a5a-274695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024743Z-r197bdfb6b4xfp4mncra29rqkc00000000xg00000000520t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:43 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:43 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024743Z-15b8d89586f989rkwt13xern5400000002qg00000000adaf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:43 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.7	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:44 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:44 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: a5807169-a01e-0032-6664-271949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024744Z-17c5cb586f6mkpfkkpsf1dpups00000002sg000000007but x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:44 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.7	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:44 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:44 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024744Z-16849878b78fhxrnedubv5byks00000005ug000000003w5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:44 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.7	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:44 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024744Z-16849878b78p8hrf1se7fucxk800000008bg000000004z1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:44 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:44 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024744Z-15b8d89586fmhkw429ba5n22m800000008yg000000004d4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:44 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:44 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:44 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024744Z-16849878b78hh85qc40uyr8sc800000007m000000000s0b2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:45 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:45 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024745Z-16849878b78j5kdg3dndgqw0vg000000091g00000000p9tk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:45 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:45 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:45 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024745Z-15b8d89586fmhjx6a8nf3qm53c000000017g00000000bs59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:45 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:45 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 174f78f2-a01e-0032-607a-281949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024745Z-15b8d89586f4zwgbgswvrvz4vs00000008sg00000000a8z9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:45 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.7	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:45 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:45 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024745Z-15b8d89586ff5l62aha9080wv000000008q000000000c3se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:45 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	49875	142.250.185.98	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:45 UTC	1301	OUT	GET /pagead/viewthroughconversion/945566240/?random=1730256463759&cv=11&fst=1730256463759&bg=ffffff&guid=ON&async=1&gtm=45be4as0z8849071394za201zb849071394&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&hn=www.googleadservices.com&frm=0&tiba=CK%20Group%20Staff%20Offer&npa=0&pscdl=noapi&auid=271674906.1730256461&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9zPHZkXfG4fukx7nn2tUDHHUSX_3K6swPlzdzq87vvWtkjMb9hL0FfelR
2024-10-30 02:47:45 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 02:47:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 02:47:45 UTC	675	IN	Data Raw: 31 32 39 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1295(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-30 02:47:45 UTC	1378	IN	Data Raw: 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d 7d 63 3d 63 5b 63 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 70 26 26 64 3d 3d 3d 22 65 73 36 22 3f 67 5b 63 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 64 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 68 28 74 2c 63 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 3a 62 21 3d 3d 64 26 26 28 76 5b 63 5d 3d 3d 3d 76 6f 69 64 20 30 Data Ascii: r c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0
2024-10-30 02:47:45 UTC	1378	IN	Data Raw: 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 29 29 7c 7c 52 28 22 53 69 6c 6b 22 29 7d 3b 21 52 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 55 28 29 3b 55 28 29 3b 52 28 22 53 61 66 61 72 69 22 29 26 26 28 55 28 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 Data Ascii: dexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R("CriOS"))&&!(T()?0:R("Edge"))\|\|R("Silk")};!R("Android")\|\|U();U();R("Safari")&&(U()\|\|(T()?0:R("Coast"))\|\|(T()?0:R("Opera"))\|\|(T()?0:R("Edge"
2024-10-30 02:47:45 UTC	1334	IN	Data Raw: 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 63 3d 64 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 58 3d 5b 22 73 73 5f 22 5d 2c 59 3d 73 7c 7c 7a 3b 58 5b 30 5d 69 6e 20 59 7c 7c 74 79 70 65 6f 66 20 59 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 59 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 58 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 5a 3b 58 2e 6c 65 6e 67 74 68 26 26 28 5a 3d 58 2e 73 68 69 66 74 28 29 29 3b Data Ascii: con&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.src=d[f.g]}e()}var X=["ss_"],Y=s\|\|z;X[0]in Y\|\|typeof Y.execScript=="undefined"\|\|Y.execScript("var "+X[0]); for(var Z;X.length&&(Z=X.shift());
2024-10-30 02:47:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:45 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: efea810d-301e-001f-2497-28aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024745Z-r197bdfb6b4grkz4xgvkar0zcs00000006zg00000000k2ae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.7	49876	142.250.185.66	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:45 UTC	1425	OUT	GET /td/rul/945566240?random=1730256463759&cv=11&fst=1730256463759&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4as0z8849071394za201zb849071394&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&hn=www.googleadservices.com&frm=0&tiba=CK%20Group%20Staff%20Offer&npa=0&pscdl=noapi&auid=271674906.1730256461&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9zPHZkXfG4fukx7nn2tUDHHUSX_3K6swPlzdzq87vvWtkjMb9hL0FfelR
2024-10-30 02:47:45 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 02:47:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 02:47:45 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-30 02:47:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:46 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024746Z-15b8d89586flzzksdx5d6q7g1000000002eg00000000fdbc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:46 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024746Z-16849878b78sx229w7g7at4nkg00000005m000000000pfrf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:46 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024746Z-15b8d89586fzhrwgk23ex2bvhw0000000aag00000000av8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:46 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024746Z-16849878b78bcpfn2qf7sm6hsn000000091g00000000ath6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	49884	216.239.32.181	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	1270	OUT	POST /g/collect?v=2&tid=G-MYEVWDEELX&gtm=45je4as0v879548136z8849071394za200zb849071394&_p=1730256450161&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&cid=1773833745.1730256460&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1730256464&sct=1&seg=0&dl=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&dt=CK%20Group%20Staff%20Offer&en=page_view&_fv=1&_ss=1&tfd=22792 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.harbour-plaza.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:46 UTC	852	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.harbour-plaza.com Date: Wed, 30 Oct 2024 02:47:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024746Z-15b8d89586fnsf5zkvx8tfb0zc00000002eg00000000f9gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	49885	74.125.133.156	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	954	OUT	POST /g/collect?v=2&tid=G-MYEVWDEELX&cid=1773833745.1730256460&gtm=45je4as0v879548136z8849071394za200zb849071394&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.harbour-plaza.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9zPHZkXfG4fukx7nn2tUDHHUSX_3K6swPlzdzq87vvWtkjMb9hL0FfelR
2024-10-30 02:47:46 UTC	852	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.harbour-plaza.com Date: Wed, 30 Oct 2024 02:47:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	49886	142.250.185.66	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	1085	OUT	GET /td/ga/rul?tid=G-MYEVWDEELX&gacid=1773833745.1730256460&gtm=45je4as0v879548136z8849071394za200zb849071394&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=942063022 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUn9zPHZkXfG4fukx7nn2tUDHHUSX_3K6swPlzdzq87vvWtkjMb9hL0FfelR
2024-10-30 02:47:46 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 02:47:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 02:47:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-30 02:47:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49888	216.58.206.68	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:46 UTC	1367	OUT	GET /pagead/1p-user-list/945566240/?random=1730256463759&cv=11&fst=1730253600000&bg=ffffff&guid=ON&async=1&gtm=45be4as0z8849071394za201zb849071394&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.harbour-plaza.com%2Fgroup%2Fen%2Fstaff-offer&hn=www.googleadservices.com&frm=0&tiba=CK%20Group%20Staff%20Offer&npa=0&pscdl=noapi&auid=271674906.1730256461&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dJxKFp-eZ6Y9W-OsyYiGdamsgw0MmZW6T5EvFYtZ3ob4QHCo-&random=41500456&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlKHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 02:47:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 30 Oct 2024 02:47:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 02:47:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:47 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 07599615-001e-0082-48f6-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024747Z-17c5cb586f69w69mgazyf263an00000006pg000000005c62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:47 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:47 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 989513d0-f01e-0096-5813-2610ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024747Z-17c5cb586f6wnfhvhw6gvetfh400000006yg0000000054s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:47 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.7	49893	13.107.246.45	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:47 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d518f54b-201e-006e-10e8-28bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024747Z-15b8d89586fnsf5zkvx8tfb0zc00000002k00000000088v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:47 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024747Z-16849878b78sx229w7g7at4nkg00000005s0000000002wu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:47 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4a7dd446-f01e-0096-5b9b-2710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024748Z-r197bdfb6b4c8q4qvwwy2byzsw00000007u0000000004mfm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:48 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:47 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 5b2d2bb9-d01e-0028-519c-277896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024748Z-15b8d89586f4zwgbgswvrvz4vs00000008p000000000hr6s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:48 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:48 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024748Z-16849878b78zqkvcwgr6h55x9n00000006sg00000000ufh9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:48 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:48 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024748Z-16849878b78fhxrnedubv5byks00000005q000000000mqaf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:48 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:48 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: fd10a765-001e-002b-6c44-2899f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024748Z-15b8d89586fhl2qtatrz3vfkf00000000dm000000000c0k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	49900	18.166.199.244	443	6156	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:48 UTC	940	OUT	GET /group/files/website/9/6a73eba7-9673-4d1d-a795-72c1dc3246cf.png HTTP/1.1 Host: www.harbour-plaza.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.harbour-plaza.com/group/en/staff-offer Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_cc=true; s_sq=%5B%5BB%5D%5D; _ga_GEMX71Y2CB=GS1.1.1730256459.1.0.1730256459.0.0.0; _gcl_au=1.1.271674906.1730256461; _gid=GA1.2.704031150.1730256463; _gat_UA-202272906-1=1; _ga_MYEVWDEELX=GS1.1.1730256464.1.0.1730256464.60.0.0; _ga=GA1.1.1773833745.1730256460
2024-10-30 02:47:48 UTC	838	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: image/png Content-Length: 3117 Connection: close Server: nginx Last-Modified: Tue, 15 Oct 2024 01:47:09 GMT ETag: "670dc99d-c2d" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-Xss-Protection: 1;mode=block Feature-Policy: sync-xhr 'self'; autoplay 'self'; accelerometer 'none'; camera 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; payment 'none'; usb 'none' Permissions-Policy: sync-xhr=(self), autoplay=(self), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() Referrer-Policy: strict-origin-when-cross-origin Expect-CT: enforce, max-age=604800 Accept-Ranges: bytes
2024-10-30 02:47:48 UTC	3117	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 42 00 00 00 39 08 06 00 00 00 82 b1 fd ea 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 25 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDRB9tEXtSoftwareAdobe ImageReadyqe<%iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:48 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e5760-501e-00a0-45eb-289d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024749Z-17c5cb586f6vcw6vtg5eymp4u800000005mg00000000335b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:48 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:49 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: b357c660-c01e-008e-6e16-297381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024748Z-15b8d89586f8l5961kfst8fpb00000000k3000000000cppy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 02:47:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 02:47:48 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 02:47:49 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 02:47:48 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T024748Z-16849878b78tg5n42kspfr0x48000000079g00000000vh10 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 02:47:49 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	22:47:18
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:47:19
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 --field-trial-handle=2168,i,1629603563974126045,9633521198816050405,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:47:22
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.harbour-plaza.com/group/en/staff-offer"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	DNS traffic detected: DNS query: www.harbour-plaza.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tt.mbww.com
Source: global traffic	DNS traffic detected: DNS query: onboard.triptease.io
Source: global traffic	DNS traffic detected: DNS query: harbourplazahotel.122.2o7.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: targeted-messages.triptease.io
Source: global traffic	DNS traffic detected: DNS query: static-meta.triptease.io
Source: global traffic	DNS traffic detected: DNS query: b.triptease.io
Source: global traffic	DNS traffic detected: DNS query: messages.guest-experience.triptease.io
Source: global traffic	DNS traffic detected: DNS query: api.triptease.io

Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_145.2.dr, chromecache_157.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_179.2.dr, chromecache_198.2.dr, chromecache_145.2.dr, chromecache_157.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_232.2.dr, chromecache_160.2.dr, chromecache_274.2.dr, chromecache_175.2.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.harbour-plaza.com/group/en/staff-offer

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Windows Analysis Report
https://www.harbour-plaza.com/group/en/staff-offer