Edit tour

Windows Analysis Report
https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q

Overview

General Information

Sample URL:	https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q
Analysis ID:	1559013
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1928,i,17314806042429278240,6247876920204235680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 1164 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 5380 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 1600 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1372,i,13329912017081315752,456046780158130882,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

cleanup

HTTP traffic detected: POST /OnlineBilling/Master/Link_Data_Temp HTTP/1.1Host: billing.waterboard.lkConnection: keep-aliveContent-Length: 28Access-Control-Allow-Origin: *Accept: application/json, text/plain, */*Content-Type: application/jsonsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ebis.waterboard.lkSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ebis.waterboard.lk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Wed, 20 Nov 2024 02:24:48 GMTConnection: closeContent-Length: 1245

Source: b2dcaf8f-8522-4e7c-81f3-6175c7e1e805.tmp.9.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_250.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_250.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_256.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_254.2.dr	String found in binary or memory: https://tailwindcss.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 50749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 50829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50862
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 50875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 50852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50870
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50872
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50884
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50816
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50817
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50819
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50826
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50828
Source: unknown	Network traffic detected: HTTP traffic on port 50759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 50772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50832
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50838
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50837
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50830
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 50794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50848
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50841
Source: unknown	Network traffic detected: HTTP traffic on port 50876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50840
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 50745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 50792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 50874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 50779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50764 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.164.15:443 -> 192.168.2.5:50739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:50747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:50763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:50776 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@38/91@13/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-19 21-25-35-975.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1928,i,17314806042429278240,6247876920204235680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q"
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1372,i,13329912017081315752,456046780158130882,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1928,i,17314806042429278240,6247876920204235680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1372,i,13329912017081315752,456046780158130882,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

File opened: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\crash_reporter.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 246
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 246			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://billing.waterboard.lk/OnlineBilling/Master/Link_Data_Temp	0%	Avira URL Cloud	safe
https://billing.waterboard.lk/favicon.ico	0%	Avira URL Cloud	safe
https://billing.waterboard.lk/EbillViewer/Api/Metering/Ebill_Viewer	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ebis.waterboard.lk	124.43.162.133	true	false	high
www.google.com	142.250.185.164	true	false	high
billing.waterboard.lk	124.43.145.124	true	false	unknown
15.164.165.52.in-addr.arpa	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://billing.waterboard.lk/favicon.ico	false	Avira URL Cloud: safe	unknown
https://billing.waterboard.lk/OnlineBilling/Master/Link_Data_Temp	false	Avira URL Cloud: safe	unknown
https://ebis.waterboard.lk/ebill/playStore.png	false		high
https://ebis.waterboard.lk/ebill/favicon.ico	false		high
https://ebis.waterboard.lk/wlogo.png	false		high
https://ebis.waterboard.lk/ebill/static/css/main.e6a39b54.css	false		high
https://ebis.waterboard.lk/ebill/manifest.json	false		high
https://ebis.waterboard.lk/ebill/static/js/main.dd47d300.js	false		high
https://ebis.waterboard.lk/ebill/appStore.png	false		high
https://ebis.waterboard.lk/ebill/logo192.png	false		high
https://billing.waterboard.lk/OnlineBillingEmail/oTodKq4I3Q.pdf	false		unknown
https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	false		high
https://billing.waterboard.lk/EbillViewer/Api/Metering/Ebill_Viewer	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Downloads/downloaded.pdf	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://chrome.cloudflare-dns.com	b2dcaf8f-8522-4e7c-81f3-6175c7e1e805.tmp.9.dr	false		high
https://tailwindcss.com	chromecache_254.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
124.43.145.124	billing.waterboard.lk	Sri Lanka	9329	SLTINT-AS-APSriLankaTelecomInternetLK	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
124.43.162.133	ebis.waterboard.lk	Sri Lanka	9329	SLTINT-AS-APSriLankaTelecomInternetLK	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559013
Start date and time:	2024-11-20 03:23:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@38/91@13/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.185.238, 108.177.15.84, 34.104.35.123, 142.250.74.202, 142.250.185.131, 142.250.184.202, 142.250.185.202, 142.250.186.106, 142.250.186.138, 216.58.212.138, 142.250.185.138, 142.250.186.170, 216.58.206.74, 142.250.185.234, 142.250.186.74, 142.250.185.170, 142.250.185.106, 142.250.185.74, 142.250.184.234, 172.217.18.10, 172.217.16.202, 199.232.214.172, 192.229.221.95, 142.250.185.67, 184.28.88.176, 54.144.73.197, 34.193.227.236, 107.22.247.231, 18.207.85.246, 95.101.148.135, 2.20.245.141, 2.20.245.134, 23.22.254.206, 52.5.13.197, 52.202.204.11, 54.227.187.23
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.258152777183215
Encrypted:	false
SSDEEP:	6:HUOKRLc0Emlyq2P92nKuAl9OmbnIFUt8YUOKRLc911Zmw+YUOKRLcMRkwO92nKui:0u0Emlyv4HAahFUt8RuZ/+RuMR5LHAae
MD5:	436D56B44A69FF02F64501CDCFCDCB8D
SHA1:	49B109AA324D0597608026655796EEDD0F3A9914
SHA-256:	7B77F55B3E78F9933FC4AF16107EB2B9ED64EA15FCA0414DECE45D3F35725016
SHA-512:	1C7EBE8DD53386154CEECB29C89AF4EEE44E0D09026B471E2AD334B64DC3C3FD1F6EB5C9F417B922D2ED310C5C9EB7D72FF8B0F618AEE1F7921911058CDA4F16
Malicious:	false
Reputation:	low
Preview:	2024/11/19-21:25:33.964 1a74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/19-21:25:33.967 1a74 Recovering log #3.2024/11/19-21:25:33.968 1a74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.258152777183215
Encrypted:	false
SSDEEP:	6:HUOKRLc0Emlyq2P92nKuAl9OmbnIFUt8YUOKRLc911Zmw+YUOKRLcMRkwO92nKui:0u0Emlyv4HAahFUt8RuZ/+RuMR5LHAae
MD5:	436D56B44A69FF02F64501CDCFCDCB8D
SHA1:	49B109AA324D0597608026655796EEDD0F3A9914
SHA-256:	7B77F55B3E78F9933FC4AF16107EB2B9ED64EA15FCA0414DECE45D3F35725016
SHA-512:	1C7EBE8DD53386154CEECB29C89AF4EEE44E0D09026B471E2AD334B64DC3C3FD1F6EB5C9F417B922D2ED310C5C9EB7D72FF8B0F618AEE1F7921911058CDA4F16
Malicious:	false
Reputation:	low
Preview:	2024/11/19-21:25:33.964 1a74 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/11/19-21:25:33.967 1a74 Recovering log #3.2024/11/19-21:25:33.968 1a74 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.162150368958096
Encrypted:	false
SSDEEP:	6:HUOKN6Iq2P92nKuAl9Ombzo2jMGIFUt8YUOKNc2VFZZmw+YUOK7kwO92nKuAl9OU:08Iv4HAa8uFUt8RO2h/+R75LHAa8RJ
MD5:	F581C52B84F5560C5D3199B49232CC5B
SHA1:	112751390AE7244059BC80F1A2A11E6013F138FD
SHA-256:	2A82E6EC82837CC016EAECC35D8CEF2ED851C65D0A2FFC9E9EE3F681AA0CA525
SHA-512:	5A2B14CC088C537331C72A10FCFA03F2DA66BBFA85CF9A106C6D6C797A23DAF406F9A44C875EB1476CBD188F91806B86469674AD1677E55C01A9CEA511A86EB6
Malicious:	false
Reputation:	low
Preview:	2024/11/19-21:25:34.016 1170 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/19-21:25:34.019 1170 Recovering log #3.2024/11/19-21:25:34.020 1170 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.162150368958096
Encrypted:	false
SSDEEP:	6:HUOKN6Iq2P92nKuAl9Ombzo2jMGIFUt8YUOKNc2VFZZmw+YUOK7kwO92nKuAl9OU:08Iv4HAa8uFUt8RO2h/+R75LHAa8RJ
MD5:	F581C52B84F5560C5D3199B49232CC5B
SHA1:	112751390AE7244059BC80F1A2A11E6013F138FD
SHA-256:	2A82E6EC82837CC016EAECC35D8CEF2ED851C65D0A2FFC9E9EE3F681AA0CA525
SHA-512:	5A2B14CC088C537331C72A10FCFA03F2DA66BBFA85CF9A106C6D6C797A23DAF406F9A44C875EB1476CBD188F91806B86469674AD1677E55C01A9CEA511A86EB6
Malicious:	false
Reputation:	low
Preview:	2024/11/19-21:25:34.016 1170 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/11/19-21:25:34.019 1170 Recovering log #3.2024/11/19-21:25:34.020 1170 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	358
Entropy (8bit):	5.000414071995525
Encrypted:	false
SSDEEP:	6:YHpoueH2a9a1o3/QBRXHOJ3/QBR7Y53h6ubQ+a4MS7PMVKJTnMRK3B1KF+:YH/u2caq3am3QYiubxnP7E4T3OF+
MD5:	CF2EFEE8B6FF36327B4EC29611FBCC75
SHA1:	1391233AFB60EF23D43C512CA2ED682D897B0A80
SHA-256:	3365A8F161D0F87A648F76B19EA43A39ADF9EC2668EB353D1AC85A542B090D3F
SHA-512:	1752F360EE3C2EB4CFB843E8D583574E1E079B469857C1A60F7D0852574B5589AB9F78839370902F1C87616E7318BD7A1F5F7676BF97EF6E57F539DBD23DDAB4
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true},{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\b2dcaf8f-8522-4e7c-81f3-6175c7e1e805.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358
Entropy (8bit):	5.000414071995525
Encrypted:	false
SSDEEP:	6:YHpoueH2a9a1o3/QBRXHOJ3/QBR7Y53h6ubQ+a4MS7PMVKJTnMRK3B1KF+:YH/u2caq3am3QYiubxnP7E4T3OF+
MD5:	CF2EFEE8B6FF36327B4EC29611FBCC75
SHA1:	1391233AFB60EF23D43C512CA2ED682D897B0A80
SHA-256:	3365A8F161D0F87A648F76B19EA43A39ADF9EC2668EB353D1AC85A542B090D3F
SHA-512:	1752F360EE3C2EB4CFB843E8D583574E1E079B469857C1A60F7D0852574B5589AB9F78839370902F1C87616E7318BD7A1F5F7676BF97EF6E57F539DBD23DDAB4
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://chrome.cloudflare-dns.com","supports_spdy":true},{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.238030602067823
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLUY/IbDxHsbZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLD
MD5:	F1C421DEE616B2C9A2CC7CBE5DD2A58B
SHA1:	9DDE0EB376F2E62EBAE33A1B76C5C11423344E98
SHA-256:	04FD6AF28E3C284674727B52DAEE98A3392A04B3C147454A866325F5A1EDF863
SHA-512:	A4E7EAF9398A2D3868F2603D6ADE62FA2ECB704C502CB5F7EB7051C1E653C518D6FB93F2539962B1747D3AE4755C272D40B99486BC423910DF8C911AABD5D66D
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.1992665031823915
Encrypted:	false
SSDEEP:	6:HUOKXXvIq2P92nKuAl9OmbzNMxIFUt8YUOKX3Zmw+YUOKXlkwO92nKuAl9OmbzNq:0X/Iv4HAa8jFUt8RX3/+RXl5LHAa84J
MD5:	87CD6EA8B85E31CECEFD0662E9239201
SHA1:	CF515E59CDEF21AFC840935D80FDC1888C896E6D
SHA-256:	DBC3C7E481069FDDC39EF42078A0B53CCFBBF21BA99787421D5F5851714FCA21
SHA-512:	067FAB95142C7225C5D58DE3BE5081BBCFF7EB69A89CE7F474D55969036AD32DFE95E36BAFF23BD41662F999DFCB897C7C9667947394F3D018CA7EB38C10DE95
Malicious:	false
Reputation:	low
Preview:	2024/11/19-21:25:34.316 1170 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/19-21:25:34.318 1170 Recovering log #3.2024/11/19-21:25:34.318 1170 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.1992665031823915
Encrypted:	false
SSDEEP:	6:HUOKXXvIq2P92nKuAl9OmbzNMxIFUt8YUOKX3Zmw+YUOKXlkwO92nKuAl9OmbzNq:0X/Iv4HAa8jFUt8RX3/+RXl5LHAa84J
MD5:	87CD6EA8B85E31CECEFD0662E9239201
SHA1:	CF515E59CDEF21AFC840935D80FDC1888C896E6D
SHA-256:	DBC3C7E481069FDDC39EF42078A0B53CCFBBF21BA99787421D5F5851714FCA21
SHA-512:	067FAB95142C7225C5D58DE3BE5081BBCFF7EB69A89CE7F474D55969036AD32DFE95E36BAFF23BD41662F999DFCB897C7C9667947394F3D018CA7EB38C10DE95
Malicious:	false
Reputation:	low
Preview:	2024/11/19-21:25:34.316 1170 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/11/19-21:25:34.318 1170 Recovering log #3.2024/11/19-21:25:34.318 1170 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241120022538Z-195.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:	dropped
Size (bytes):	65110
Entropy (8bit):	1.777317628120689
Encrypted:	false
SSDEEP:	96:n/7exedjTh9Ou3EMkWHmHfl+1TQUnTjQOUMJMMf/N:/ixwTr3n2flITZ
MD5:	304E4AAFCBB0FB2BE2CCAF0ADA077F82
SHA1:	1633DEC94A38F886E0B5096E67AF0CCD22D0D45D
SHA-256:	F3EB03795DAAEBDCF0B01C4E1B0255C76708D0023A9F24F2AD3FFF02A8C5F04F
SHA-512:	B2856BBF01A3AEE6871EE17D2AEFDF15EF3CA4979A59FFA52947F387574C38F130733D35ACA8EE896546F1338E0A836AF8E077B31424F0FB37E1EC69C29D2776
Malicious:	false
Reputation:	low
Preview:	BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.4832

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	185099
Entropy (8bit):	5.182478651346149
Encrypted:	false
SSDEEP:	1536:JsVoWFMWQNk1KUQII5J5lZRT95tFiQibVJDS+Stu/3IVQBrp3Mv9df0CXLhNHqTM:bViyFXE07ZmandGCyN2mM7IgOP0gC
MD5:	94185C5850C26B3C6FC24ABC385CDA58
SHA1:	42F042285037B0C35BC4226D387F88C770AB5CAA
SHA-256:	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
SHA-512:	652657C00DD6AED1A132E1DFD0B97B8DF233CDC257DA8F75AC9F2428F2F7715186EA8B3B24F8350D409CC3D49AFDD36E904B077E28B4AD3E4D08B4DBD5714344
Malicious:	false
Reputation:	low
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Reg.FamilyName:Agency FB.StyleName:Regular.MenuName:Agency FB.StyleBits:0.WeightClass:400.WidthClass:3.AngleClass:0.FullName:Agency FB.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB.FileLength:58920.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:AgencyFB-Bold.FamilyName:Agency FB.StyleName:Bold.MenuName:Agency FB.StyleBits:2.WeightClass:700.WidthClass:3.AngleClass:0.FullName:Agency FB Bold.WritingScript:Roman.hasSVG:no.hasCOLR:no.VariableFontType:NonVariableFont.WinName:Agency FB Bold.FileLength:60656.NameArray:0,Win,1,Agency FB.NameArray:0,Mac,4,Agency FB Bold.NameArray:0,Win,1,Agency FB.%EndFont..%BeginFont.Handler:WinTTHandler.FontType:TrueType.FontName:Algerian.FamilyName:Algerian.StyleName:Regular.MenuName:Algerian.StyleBits:0.We

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Reputation:	low
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.4832

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Reputation:	low
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	227002
Entropy (8bit):	3.392780893644728
Encrypted:	false
SSDEEP:	1536:WKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgF/rRoL+sn:DPCaJ/3AYvYwglFoL+sn
MD5:	87EDBEE38F56C20298F25D5D3D4D1B5C
SHA1:	7F904E9615AC3186A87472EF366DD8202855B0B7
SHA-256:	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
SHA-512:	BBEBC1FCD5BC9AE042DD5782425BA8C47BF3EAC283B2487FC4E3FF6BF8101306DAB081E5135594165D4DC1AC120FF125AADBC5B3FFE7C646183C04DF77865E0D
Malicious:	false
Reputation:	low
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.320683612041472
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJM3g98kUwPeUkwRe9:YvXKXmeNUYpW7BUGMbLUkee9
MD5:	84B29AA57726637EFDBEF6D2EBD9BD16
SHA1:	F2ADCA01393B6423686CA714B033723AB3090C67
SHA-256:	9308B7C3CFB15A1EF93153C6E1588661A93846E3F4F7B8AC48AD08A63ED59E92
SHA-512:	D4B7D6AEA0AEA2D7BF19401C1695DA7DFE20196F232BA09B4353A5BEB8834D2F5758384381360034E710E4CB81D62297DC972E19454DF2104EACBB169187108A
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.258134695006974
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJfBoTfXpnrPeUkwRe9:YvXKXmeNUYpW7BUGWTfXcUkee9
MD5:	6F0F71A6C68B5EE18CC323EFA821B4C1
SHA1:	54B09F66AFD444A90EC12A266C13A780E0FDB268
SHA-256:	3DB46A13A674C392E30C786756E53CCB025BAF4A5211C92F89CC8FDA0FA27306
SHA-512:	B66DF9FA997A1D159D007D0B3D8B1D231CD18145FC239B1A828AD3727BCEC240BB431B1866E1A1D3A1A67A2E58928B8026208844DFB7A704232E2FB9E67303B5
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.236273609752241
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJfBD2G6UpnrPeUkwRe9:YvXKXmeNUYpW7BUGR22cUkee9
MD5:	8017421D1CC224D4D86D5E816DF15AB9
SHA1:	0CF3DF8965FE29B4BC3723A54124D215EF22B164
SHA-256:	FDC70281ABEB6BF7904CAD886CAB19717BA64CC76BA7F0B3BDAF13EE40CE1BD6
SHA-512:	DF98CB1FCA96009F0E1915E1CB60D0F9454948A45E9B1866F3666885C1129338D72F4AE82714A9E8DA473D0367D71C251ECC4DAC3ECA2558726AA803E99F90C1
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.298078953755909
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJfPmwrPeUkwRe9:YvXKXmeNUYpW7BUGH56Ukee9
MD5:	AD9B68E1C1BA8FCACF3BC5DA517E4317
SHA1:	F63E5270A0A9E1339EF775381DE5FED11FE9B980
SHA-256:	B6CBF09DC52CA26F39FDDD40D9FE85ABE54C2DEAA442CD83D2A455AB3D5FA5DE
SHA-512:	55B4CBEEB648FF67BFC2BD9CE3A8D751A159D9523A590F875266A18C5FC10BB7D1F0673151340CEF94E413C6341AA894A990853473F8B8158872A68420D0F920
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.68437350557383
Encrypted:	false
SSDEEP:	24:Yv6XmeNFiBxpLgE9cQx8LennAvzBvkn0RCmK8czOCCSzRAn:YvFeNsBxhgy6SAFv5Ah8cv/zO
MD5:	80666D9930203FFF45504AA28E7E7E10
SHA1:	5A45B58BAD0CC5404D8EA3D46F1CF6544670D180
SHA-256:	06189F06490CE03A6640DB11328348DB9821FF93AEC07386E31E297CD8A83FC9
SHA-512:	C89D4BA22881C5B1ECB91DD23774A9422AB6D8068F46BDB43184E35E9CF01BDAC82AEFA7A421947A76F40D709929B0E87C6744CB2A291D1BE7646F338965DA13
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1122
Entropy (8bit):	5.673421369298499
Encrypted:	false
SSDEEP:	24:Yv6XmeNFiBtVLgEwcp06ybnAvz7xHn0RCmK8czOCYHfl8zdBgRAn:YvFeNsBtFgSNycJUAh8cvYHNO
MD5:	ECB0047F4883A42E61C4C715732A6A65
SHA1:	B46C7786994A13120E3EDD00652257118571A135
SHA-256:	094FB433BCC5BF34871EE65534329C3E6FDFE59CF089E6F67AE82EDA16CF92B8
SHA-512:	731357C2C5E797AEDA3FC9588E2561F7A4A7A6AFCB2D1C5D532A8F8D156AA8BD6AA665C7A589B0C02150FC0DD52BF478DFA591EA467743476F50A55D19F232C0
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93181_288855ActionBlock_0","campaignId":93181,"containerId":"1","controlGroupId":"","treatmentId":"1aad653c-ef44-43f7-be1c-3a2ba2cf2cfc","variationId":"288855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuIFBERiBmb3JtcyAmIGFncmVlbWVudHMuIn0sInRjY

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.247046783933941
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJfQ1rPeUkwRe9:YvXKXmeNUYpW7BUGY16Ukee9
MD5:	77CBB8A5157E76CECAA7EA3060E8B0A4
SHA1:	D0A2C5CD12E1FC31B1D2E61779BA2E0CE1E8E98A
SHA-256:	9CDDA963C5EAD624CB62AC1A17A49CAB45C2266967D81569FE8E5D2AE75AA1A3
SHA-512:	5F8341CD7FF7114A1BE832546CEB70B629CE775622ED14557237796E3105A200A9E4F1B45AC4A299D260A6BECB7EFD751BB173B9FB2AC0A9E19B2EB01810211B
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1102
Entropy (8bit):	5.669039309750444
Encrypted:	false
SSDEEP:	24:Yv6XmeNFiBs2LgErcXWl7y0nAvzIBcSJCBViVgRAn:YvFeNsBsogH47yfkB5kVzO
MD5:	0B3FA130BD7B5F96034230F4C4B73A29
SHA1:	C4E89532105248247E8691C9682FD7A08CB35CAD
SHA-256:	5EAE9FFA903C2F5F277895677ACE6C60A9FEBA2F48941AF74767D9341C95FFA0
SHA-512:	6962B8D7F8E9C204F56B6871CCEF5C1CA5AEE1AB0B6D7D35C4ACA81EAC3290CB0AEACBF26A3507782112FFF424E744C53275FD4973C53CCDE3FF548F435C9483
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93181_288855ActionBlock_1","campaignId":93181,"containerId":"1","controlGroupId":"","treatmentId":"533ab5eb-b236-4889-89a5-ac002261d71e","variationId":"288855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkVkaXRQREZSZHJBcHBGdWxsIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTRweCIsImZvbnRfc3R5bGUiOiIwIn0sImRlc2NyaXB0aW9uX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTJweCIsImZvbnRfc3R5bGUiOiItMSJ9LCJ0aXRsZSI6bnVsbCwiZGVzY3JpcHRpb24iOiJFZGl0IHRleHQsIGltYWdlcywgcGFnZXMsIGFuZCBtb3JlLiJ9LCJ0Y2F0SWQiOm51bGx9","da

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.694571284797285
Encrypted:	false
SSDEEP:	24:Yv6XmeNFiBsKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5gRAn:YvFeNsBsEgqprtrS5OZjSlwTmAfSK6O
MD5:	AA06303A88733AAB4565391E48401043
SHA1:	F7C8F54E76C20A9A03EB77938251A6C1B67457B1
SHA-256:	7438D1F7D7624B8D64F618CB27239AED1A3B130E824FDCF632C9E7CBFA8497BA
SHA-512:	6AC81B7C23354861BDCD019ADFB47A1092245706022067D1B3C6603096E458408388A5B67F6439D27660ACF3F65AE28D262FFD90327766B47D51C0F18D633D67
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.254252418493623
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJfYdPeUkwRe9:YvXKXmeNUYpW7BUGg8Ukee9
MD5:	63E9F30F2AB15094FCBC50EEC44329B9
SHA1:	C6D9A83C24D0919950CB957946DFFB52C61E7CFF
SHA-256:	235C4F0B0F774401D9A05A5D626C27452151D3FA50C7FE5335DD3D19378CA823
SHA-512:	77362EAA5CD79B1603DD8BAD00DE0D5A80C8B6965EA97355288B28814C4EFB921993670958603BCCB6446D2FA9B6A0FA63D408181DCBD6CCDFBB7D67682FC538
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.239796367076772
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJf+dPeUkwRe9:YvXKXmeNUYpW7BUG28Ukee9
MD5:	464ACD72AC218F78E6DB8EC09873278D
SHA1:	E77076E8AA0F7F95A2BC1FED57E3DEF0012222CB
SHA-256:	1BF7423E8C536CE95C9AF199C0A3B5D63671FC6F5C0504938344BA690D69E034
SHA-512:	8B0788656A38FE4505D27B24435142421134CC52C1A0A2C2EE068F2190F2FC5F5D75A6389B1C008398FF26A645CF0FE85635A34963B4AB328071876A5C414A92
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.238113932535228
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJfbPtdPeUkwRe9:YvXKXmeNUYpW7BUGDV8Ukee9
MD5:	D71DAA6DA955FB45D6ECCA191D2FB423
SHA1:	3D58405377F460FCE0D96FAD593E61F944005ED6
SHA-256:	6770C83A5DF103D8A6F4047AC657A615718BD329AE21C38435EAAEEFC96A20DD
SHA-512:	E65D8A7491867967D62363393CBB70730EEACFC11123184D9A052C94F658CA03D4214C4DCD4C1C43CDBFE52FE1C859783734AE18F8D60BB7870128196F200E1B
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.238839556362354
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJf21rPeUkwRe9:YvXKXmeNUYpW7BUG+16Ukee9
MD5:	C5798A4B932E1B39CC845E36B904C4D5
SHA1:	F2EA337A88CA18951982817DC8ED74E73E034330
SHA-256:	682C2ABA2DD640E6BAEEC1DD71BD631D092BA9B5884BD161884D850FFA80A057
SHA-512:	318E2DE10101885F60D9869BE3200AE247FCF1F465115AB9A1E419B4D52398E2F3B334212D933AAE0C39F93D89D8C0CF0A9B198FE83BDEF7F577D8E78B5D1475
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.655764561738056
Encrypted:	false
SSDEEP:	24:Yv6XmeNFiBRamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSzRAn:YvFeNsBdBgkDMUJUAh8cvMzO
MD5:	5EDBD58EB7BDBDDD0BAEA595BF042ED2
SHA1:	DD7BF2C977C065C9F10CEA716696E9492DE5F6E9
SHA-256:	56AB63F0955C23671EE565EDF090645D7E65646D12F323FD4D2E6B90A96BFABB
SHA-512:	361AC1AF9A0E02A202943CD23B6D865AF5D53DFE9009D03B9FE55177FDC80D8B12340FFE761A08EA41726CA4BF7A2D00392896847B8DF53D31BACA6E5C88FA2B
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.215898371636711
Encrypted:	false
SSDEEP:	6:YEQXJ2HXHGaVRhu5O2Y+FIbRI6XVW7+0YMfDoAvJfshHHrPeUkwRe9:YvXKXmeNUYpW7BUGUUUkee9
MD5:	29AABB9E293992E64C453AB4C569030A
SHA1:	B2CD996D96F9947D906CF3D94DFFBC17CCA3BCC6
SHA-256:	8E457D2006C115E03B0BB834EE6989206D82664D7CDB2932E8A9EB6E6E6A5050
SHA-512:	2164BBD289859EB070AAB1E7679D619C046274FC0FDC589AC5E8867459608467CBE4831021A9950332158428D4EF1A81C5441D1C24463300C94EBED3ACA70C85
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.362613036988169
Encrypted:	false
SSDEEP:	12:YvXKXmeNUYpW7BUGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWERVKn:Yv6XmeNFiB6168CgEXX5kcIfANhzRAn
MD5:	9A487203F579499AB19FA1279E2EA83E
SHA1:	96E32209D3948EC85C03254A57AB619516AC6BD3
SHA-256:	14805AC9E5BB21AD3529C110EE67DD8414B2DF54DA9438B093AF187A1CB44E51
SHA-512:	763243E4C9C07E2C9010028D17321F15B6C684C80B53BCC8EFE1D4D2609C400609261F82DCEA479B9438F592D3760CCCE35DF562DFFA62E6433B174D4D4A5D2B
Malicious:	false
Reputation:	low
Preview:	{"analyticsData":{"responseGUID":"0cb09804-4be6-486c-bbb9-130ecbffa503","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1732248100645,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1732069540685}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Reputation:	low
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2817
Entropy (8bit):	5.137107423329417
Encrypted:	false
SSDEEP:	48:YwQdY94CsWwDtkcQnf+wDEXhth0+mEYGCD6B4Ph8a79QboJG:n/FCkVfkX7hvq9QqH8l
MD5:	780562414492EC9ACDD9D26D2559699A
SHA1:	F0F97D18CFE25E4FD7FB2E604FB41EB5184E3AED
SHA-256:	64BCEBAB783A06E725F626CFA72EE93C8A12F125200E218E119BE920C3452B5F
SHA-512:	ADD6F07AB0455B960BD26D7A18CD6EBA3F486B39A25A3E10F10A8416345816032053C1CE8B03897A8173CC6F24B377A43975337AE4993ED32E4880E492431C48
Malicious:	false
Reputation:	low
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"25abeadc2ac22bff95125873240d6afb","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1122,"ts":1732069540000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"f03fb9f9ac057c545cc391efbb58244e","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1732069540000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"c91869af5642ac093bd8e64ee37f5b60","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1732069540000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"699742a468147e3d8563c034ec0e8c12","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1732069540000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"6e97eeb1e4bffe8c1663e916564ecd29","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1102,"ts":1732069540000},{"id":"Edit_InApp_Aug2020","info":{"dg":"c85a30374843452eb00060ab82552a7e","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9865504039228286
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs6I1RZKHs/Ds/SpC4zJwtNBwtNbRZ6bRZ4DF:TVl2GL7ms6ggOVplzutYtp6Pk
MD5:	8D5FFF8A4782615697BEE694464DC9C0
SHA1:	69852C73EF9E17CA7B5050FAC01EF3264C779A55
SHA-256:	73925FBB505A3FB2BC4675E3CB5ABDF3BE87FF06F938F8CF0FEAA043D4BD51EA
SHA-512:	A7905D3056D057820CC4798A6DF2027A9B85F7D155E5F7621F296BED2D38D92D855C87AF985CF41C273F5FE993EBFDF3A5AE1C21DD3F5740A532305EF3385E62
Malicious:	false
Reputation:	low
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3402477466947564
Encrypted:	false
SSDEEP:	24:7+t0TAD1RZKHs/Ds/SpCPzJwtNBwtNbRZ6bRZWf1RZKMqLBx/XYKQvGJF7urs/:7M0TGgOVpezutYtp6PMtqll2GL7ms/
MD5:	42EEFDE4A86FA4CE6046717907B7AF47
SHA1:	24E92938772B7CA20DBCA2458C2ADC55D5568782
SHA-256:	C3BCC1A2A87A335A7E053BB83E27721C8C39796B359211FA00099D32DBE1D362
SHA-512:	F186065072EF421BAF9D2CAC2EEA2BA484ED3C8AFBD055701F0B35D3C43E0143CAAF3A628E84B5B790BFF166F91636542595744DC33F9D67F32DAC7159A3E2F3
Malicious:	false
Reputation:	low
Preview:	.... .c......ZR<......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgyt6++Lrxa1FmajERu2iNydnYyu:6a6TZ44ADEytn+LtaiEanK
MD5:	B482DCD028161EAB9EC66FC77FFE2011
SHA1:	08E33505470895D3F208C9D94E9829BAF051FCB9
SHA-256:	5430B29CAC56803BD24EEED0C963C7419BC94018E762954C7CBE73D0164BBDF8
SHA-512:	591DA11DA453D7E680CA6472C9DC8AF23E6F61BBFC84DBB4315B2CCE870E4112A882E85B7B278EA3279E8D352270A6864359A7F760AE22157CBA8AAC6DAF3E04
Malicious:	false
Reputation:	low
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI1af4e.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.4963635481307946
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8mUl8tsUnH:Qw946cPbiOxDlbYnuRKpH
MD5:	202AE0BE02EEDD7FC9491635BC2F81E6
SHA1:	35289CAF0BE56C3BF89081ED9234536A96060FB2
SHA-256:	90CCB51C7F48692D09DA29E17DCF24D6EAC6BD532F049A507B1B4763D16D0AEE
SHA-512:	C6811A9998814A6C803455D4675817E5E2BAF0C0E3B3B75C3168BB400E6DFCF9FF14848805484B87C42B28A5E2DBF62CDADE6139533E584A571809CFA94742A6
Malicious:	false
Reputation:	low
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.9./.1.1./.2.0.2.4. . .2.1.:.2.5.:.4.1. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-19 21-25-35-975.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Reputation:	low
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16603
Entropy (8bit):	5.3421694006039075
Encrypted:	false
SSDEEP:	384:kr32n3S40uUnCZ7VwVTVxVz8hL4VlOdQgg0DIrm4KWIGzdO+VEVSVHVRVJVQV/MD:12Sq5PLCgtHn6Gt0tipPD
MD5:	2615B425DE1AB979052E305F547D5657
SHA1:	759F796EAD9F653F0B74F7CF15D0D4B66776AF8A
SHA-256:	041A4E719E2F6A91FDC55DFA73CAFBC8ECCBEDCCF2D01DE0C931D812A6F1B38B
SHA-512:	00D0748D524D62F0DB6713EAE02A14A2ECAD801C3996C4B334BE3C0D6A6139BEEA0D26DFC8E1CAEC755EBB2F933E3379F7BD485C3D30C7FA30CF323D50C16D9B
Malicious:	false
Reputation:	low
Preview:	SessionID=c4795275-1cf1-4f4d-af1b-9d9154a7e0fe.1732069535995 Timestamp=2024-11-19T21:25:35:995-0500 ThreadID=2232 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=c4795275-1cf1-4f4d-af1b-9d9154a7e0fe.1732069535995 Timestamp=2024-11-19T21:25:35:998-0500 ThreadID=2232 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=c4795275-1cf1-4f4d-af1b-9d9154a7e0fe.1732069535995 Timestamp=2024-11-19T21:25:35:998-0500 ThreadID=2232 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=c4795275-1cf1-4f4d-af1b-9d9154a7e0fe.1732069535995 Timestamp=2024-11-19T21:25:35:998-0500 ThreadID=2232 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=c4795275-1cf1-4f4d-af1b-9d9154a7e0fe.1732069535995 Timestamp=2024-11-19T21:25:35:998-0500 ThreadID=2232 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.408208105612813
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGbS:G
MD5:	8F762F4579F5BC62E198BB1102BFE30F
SHA1:	30712206C707332A172F4CB4603BFB81F382C186
SHA-256:	BEBCFB381DDC126EAC1477BCFC3F346D40FCEA444D9C8BE8692EBCDC17A54E30
SHA-512:	A64CCFF57ED03BCF57D53C3D1CB79D888FFF07BC50B69DF8519D41E7DC9197ACC68AABDDAB3825BDFCCA7DF0EF5BD2B73D8A4C4B64CAB354890796DC002CF76D
Malicious:	false
Reputation:	low
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\64db4a80-29d1-4ef6-b9bb-4fb65fa6a945.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Reputation:	low
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\8ba574f5-42b5-456c-8cfb-b200f28f5646.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\9ddb4ec3-8e80-4a51-a800-4484ef5e62d5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Reputation:	low
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\a439b6b4-289c-4642-b5bd-ba6823c43e93.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xA7owWLaGZDwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JVwWLaGZDwZGk3mlind9i4ufFXpAXkru
MD5:	18E3D04537AF72FDBEB3760B2D10C80E
SHA1:	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC
SHA-256:	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
SHA-512:	2A5B9B0A5DC98151AD2346055DF2F7BFDE62F6069A4A6A9AB3377B644D61AE31609B9FC73BEE4A0E929F84BF30DA4C1CDE628915AC37C7542FD170D12DE41298
Malicious:	false
Reputation:	low
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:24:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9765222083664766
Encrypted:	false
SSDEEP:	48:8odlTtxGHDidAKZdA19ehwiZUklqehqy+3:8mTC9y
MD5:	CCF76977D92450DF72CBB85C6748F25E
SHA1:	FC0CF4AB132E1EDA07A352AC528D42E1D2751225
SHA-256:	16996C02249C6AB25A469B7F6A5731D75E5962F40188D2C7CB5C3C1D81DFFCB6
SHA-512:	CC6CD93E11A7452889A2B264278FE7A6344EA7661E82FDC94C2E6C20252759DC48D42B94444F75DCF09943FE16E75B01AF3E4044F77A9A726BD714000F70BC43
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......N.:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:24:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9874997112441353
Encrypted:	false
SSDEEP:	48:89dlTtxGHDidAKZdA1weh/iZUkAQkqehty+2:81TY9QAy
MD5:	87D50C3AAC7DCCF2D167718A29029E4C
SHA1:	C63939651AD5526CC272AB60C31E45E8F1712DF9
SHA-256:	DA338188D0485CEC3DD356346FCCA1B196C9DB91E18FD7FE3019427D463F4063
SHA-512:	8CF389DBCBA912919FD07852CA7B52DABC1C2B9CDF413AEE06B3831B3A2DAE87C8CE94AC808F1A8BDD23B2C0868FE6A7C2698443296CC6438E7C6A95AB2FBFD6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Y1yN.:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0037623424206386
Encrypted:	false
SSDEEP:	48:8xSdlTtxsHDidAKZdA14tseh7sFiZUkmgqeh7s7y+BX:8xsTynBy
MD5:	1076C9D6A774213DCF2BB1E607DB9425
SHA1:	8D1AEDFBDD6B2F1604C9003A0EF877A8B795B632
SHA-256:	ADB143D93A10E3DCEB1C72ADCE190AE91A63AF49AF224988E639B684DC0B86C6
SHA-512:	93C2D717D68361C073AD44688051D792859D12AA72E062084248455B7DD753903A31E5176790935C7A709592B7AC6705E15DFC8DAD777B8BC4CAA83056072E17
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:24:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9903017714574966
Encrypted:	false
SSDEEP:	48:8adlTtxGHDidAKZdA1vehDiZUkwqehpy+R:8ETDDy
MD5:	163743A2547604844EAEB3813B48F69E
SHA1:	473CE65F85EF62F78D10DB97BA508C5C0FB0CD93
SHA-256:	34F825484013E0D6A362A223E2421B5B10E747714DE74FAA3CF370FA0E0E3342
SHA-512:	FFD684CB9FC2B22274282BAB16CFA160B1BC79CF678B15831092EC17FD83E7AF25F434502ABCEDBC74213CE963B4100E8C4F97EF36B1FE66CFA1B7D91149B3AB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......qN.:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:24:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9785671211659217
Encrypted:	false
SSDEEP:	48:8HTdlTtxGHDidAKZdA1hehBiZUk1W1qeh/y+C:8HPTT9fy
MD5:	7462E6DB8182BAFD8D578A8CD6A73057
SHA1:	539CB6A79953E957ED32E8040C806C7A890CF7F5
SHA-256:	AB921C366FB5352EEFF90B75E2BFF68AC50629415B4DDF611E4BE5D37F5810C1
SHA-512:	B4DBF109956326C4BE8B293DDD8B0936DC4DE8CA0CE047121188FB93E2DD709119B6AC2861B4B78101CC6FF3C19CF07CF4FB6FF9EF8B06E9F9E48B7E3DDB0D58
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......N.:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 01:24:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9863968522452344
Encrypted:	false
SSDEEP:	48:8w5dlTtxGHDidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbBy+yT+:8sTDT/TbxWOvTbBy7T
MD5:	CBE32ACAE745951917431D089297D0D2
SHA1:	2F20C137029D26E20C0EB83BD104BBCC708F9D26
SHA-256:	E297BFEFA6F36CE32B8D791394E8B6634ED719B90D9D55CDDA91F9B415E7B761
SHA-512:	F17C3786E849E88B145B3063B49984F4BCA5FE75A40EB198BB41ADF22AFDF72A25838AFA0F9B1CFFA4C5B9904184CE3732AF8FD81D4A2ACFC510F5833C19BEC9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......eN.:..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.ItY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VtY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VtY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VtY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VtY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\9a5d8a3f-f823-4a68-a902-1a37fcb91585.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.3, 1 pages
Category:	dropped
Size (bytes):	709310
Entropy (8bit):	7.9068048983208685
Encrypted:	false
SSDEEP:	12288:xmGjHqyF9K7fXLqQdAk6IUNzdhV3W9SQaToLLnUCJqikf:IIK7n6tNzdhVGSQoCJW
MD5:	B83211854F16F7AA11CE227DE7497A27
SHA1:	C538EF38DDD60B57BDB18AE64BED849FC5952ABC
SHA-256:	BFC7C57841216A6FE04130773C6D2000979E9FB06EC194348C60F21C0EAC4594
SHA-512:	9EAA3AE3D00548E82B3407883BD10FAFFB39B2EE8302AC91C3A8EA35D80379212FB4A0276E7B9E53E37EFA460E46F230E93C8B963609CE0ADDFCA8B77DC04AAC
Malicious:	false
Reputation:	low
Preview:	%PDF-1.3..1 0 obj..[/PDF /Text /ImageB /ImageC /ImageI]..endobj..12 0 obj..<< /Length 5616 /Filter /FlateDecode >> stream..X..]ms.6..~U..P........r...I\..Ol..r.. ..ol.....$...e...K..q.....F.A.._..O.dF...?27...h.IA.S.+...~C..(...I..F3.51YN..%'...).&J)r.D./..9.._J.9..Q.H.g...........,.k..TL....Lg..d\|Y....F...l......r5.'/...>O.rz.z..Hn..c).MP0y$_'+.......72.....a6.4%.....i.+........-rE.VQ4.K..j........}.Z.8.Fe..]T.f-..0.)...T.0F..c...m.G...b...cV.c!.1c=5r.5.G.E..........$.I..%.u.<oP...\|On..}...jN.j..z.l.+ .t..f.\7...<..W..%J7..5wsh......DX..K5,..gg..77=.{m.....M.s.....o.....3.....^...5.~\|;...Fn.....]..E...VZ......+B.Z(..3#..E.y(9.K%......I;N]...r....~.2./d...j..x{>>........(c\K.WY.5G.....,....q...e0.I..RM39..x7.$g.....N.m.1 .......T8]af..?.H.(.Y..^......\|%......Z..o..Q.......M...'%2&.+...V......J.%..{SMo,L.Ls......r.h...4.&5.N...`+...~N.!....L...BiP.xV....a+.b..t-......WhI....`...80i}.V8..h.$].f:.....J.f...;.N....+h.p.$]...0+...........q

C:\Users\user\Downloads\downloaded.pdf (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.3, 1 pages
Category:	dropped
Size (bytes):	709310
Entropy (8bit):	7.9068048983208685
Encrypted:	false
SSDEEP:	12288:xmGjHqyF9K7fXLqQdAk6IUNzdhV3W9SQaToLLnUCJqikf:IIK7n6tNzdhVGSQoCJW
MD5:	B83211854F16F7AA11CE227DE7497A27
SHA1:	C538EF38DDD60B57BDB18AE64BED849FC5952ABC
SHA-256:	BFC7C57841216A6FE04130773C6D2000979E9FB06EC194348C60F21C0EAC4594
SHA-512:	9EAA3AE3D00548E82B3407883BD10FAFFB39B2EE8302AC91C3A8EA35D80379212FB4A0276E7B9E53E37EFA460E46F230E93C8B963609CE0ADDFCA8B77DC04AAC
Malicious:	false
Reputation:	low
Preview:	%PDF-1.3..1 0 obj..[/PDF /Text /ImageB /ImageC /ImageI]..endobj..12 0 obj..<< /Length 5616 /Filter /FlateDecode >> stream..X..]ms.6..~U..P........r...I\..Ol..r.. ..ol.....$...e...K..q.....F.A.._..O.dF...?27...h.IA.S.+...~C..(...I..F3.51YN..%'...).&J)r.D./..9.._J.9..Q.H.g...........,.k..TL....Lg..d\|Y....F...l......r5.'/...>O.rz.z..Hn..c).MP0y$_'+.......72.....a6.4%.....i.+........-rE.VQ4.K..j........}.Z.8.Fe..]T.f-..0.)...T.0F..c...m.G...b...cV.c!.1c=5r.5.G.E..........$.I..%.u.<oP...\|On..}...jN.j..z.l.+ .t..f.\7...<..W..%J7..5wsh......DX..K5,..gg..77=.{m.....M.s.....o.....3.....^...5.~\|;...Fn.....]..E...VZ......+B.Z(..3#..E.y(9.K%......I;N]...r....~.2./d...j..x{>>........(c\K.WY.5G.....,....q...e0.I..RM39..x7.$g.....N.m.1 .......T8]af..?.H.(.Y..^......\|%......Z..o..Q.......M...'%2&.+...V......J.%..{SMo,L.Ls......r.h...4.&5.N...`+...~N.!....L...BiP.xV....a+.b..t-......WhI....`...80i}.V8..h.$].f:.....J.f...;.N....+h.p.$]...0+...........q

C:\Users\user\Downloads\downloaded.pdf.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.3, 1 pages
Category:	dropped
Size (bytes):	709310
Entropy (8bit):	7.9068048983208685
Encrypted:	false
SSDEEP:	12288:xmGjHqyF9K7fXLqQdAk6IUNzdhV3W9SQaToLLnUCJqikf:IIK7n6tNzdhVGSQoCJW
MD5:	B83211854F16F7AA11CE227DE7497A27
SHA1:	C538EF38DDD60B57BDB18AE64BED849FC5952ABC
SHA-256:	BFC7C57841216A6FE04130773C6D2000979E9FB06EC194348C60F21C0EAC4594
SHA-512:	9EAA3AE3D00548E82B3407883BD10FAFFB39B2EE8302AC91C3A8EA35D80379212FB4A0276E7B9E53E37EFA460E46F230E93C8B963609CE0ADDFCA8B77DC04AAC
Malicious:	false
Reputation:	low
Preview:	%PDF-1.3..1 0 obj..[/PDF /Text /ImageB /ImageC /ImageI]..endobj..12 0 obj..<< /Length 5616 /Filter /FlateDecode >> stream..X..]ms.6..~U..P........r...I\..Ol..r.. ..ol.....$...e...K..q.....F.A.._..O.dF...?27...h.IA.S.+...~C..(...I..F3.51YN..%'...).&J)r.D./..9.._J.9..Q.H.g...........,.k..TL....Lg..d\|Y....F...l......r5.'/...>O.rz.z..Hn..c).MP0y$_'+.......72.....a6.4%.....i.+........-rE.VQ4.K..j........}.Z.8.Fe..]T.f-..0.)...T.0F..c...m.G...b...cV.c!.1c=5r.5.G.E..........$.I..%.u.<oP...\|On..}...jN.j..z.l.+ .t..f.\7...<..W..%J7..5wsh......DX..K5,..gg..77=.{m.....M.s.....o.....3.....^...5.~\|;...Fn.....]..E...VZ......+B.Z(..3#..E.y(9.K%......I;N]...r....~.2./d...j..x{>>........(c\K.WY.5G.....,....q...e0.I..RM39..x7.$g.....N.m.1 .......T8]af..?.H.(.Y..^......\|%......Z..o..Q.......M...'%2&.+...V......J.%..{SMo,L.Ls......r.h...4.&5.N...`+...~N.!....L...BiP.xV....a+.b..t-......WhI....`...80i}.V8..h.$].f:.....J.f...;.N....+h.p.$]...0+...........q

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3376
Entropy (8bit):	5.330392844616368
Encrypted:	false
SSDEEP:	96:QO1akJc+ukO1abN/OEalJc+ukOEaHN/OXa0Jc+ukOXaLN/OpaIJc+ukOpanNE:mgdyNQtQ3fsJu
MD5:	033550809CCB4A1C66C303F150C88A3E
SHA1:	7C3641355A64F81A0E0CC92FB9DC1BA9EAE86CEF
SHA-256:	9AA42C76FD5CE12BA085CFD7E8361EC7260C3CD7685A43513E112064FF309015
SHA-512:	B6F6EE226C5D713898C7B7F53B41193647D199275CA2730FA26C687641BC0097310FB8E6401C91C4A7CEBD38390D23D627E9AC0DA3525B27A05CD85FB1FC0CFD
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;700&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.co

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	267320
Entropy (8bit):	5.349879218112604
Encrypted:	false
SSDEEP:	3072:AoCoPu2NfOhOW7M/aqkf/Q/wIZq+F4cKLh3uGnNuE4:AwfpWI/arkxb6LhFNuE4
MD5:	3448F51832DD8CCE4724EA443E6FAFE5
SHA1:	3AF4ED34629E23719A025CF490EA902A44213097
SHA-256:	73EC4B48C190B4D888FE1AC5A6636391F5AB039263A998AE1850F9BC867F0A0C
SHA-512:	33FC93A8ABBDE2EDD3475E8493CD61A1C2D831E67AD2723A89F8F0004782AA0B135EA910549DF381805640698003143743F4E4CA52C08D87813A7CFBAEA5ABF8
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/static/js/main.dd47d300.js
Preview:	/! For license information please see main.dd47d300.js.LICENSE.txt /.!function(){var e={426:function(e,t,n){(e=n.nmd(e)).exports=function(){"use strict";var t,n;function r(){return t.apply(null,arguments)}function a(e){t=e}function i(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function o(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function l(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function u(e){if(Object.getOwnPropertyNames)return 0===Object.getOwnPropertyNames(e).length;var t;for(t in e)if(l(e,t))return!1;return!0}function s(e){return void 0===e}function c(e){return"number"===typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function f(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function d(e,t){var n,r=[],a=e.length;for(n=0;n<a;++n)r.push(t(e[n],n));return r}function h(e,t){for(var n in t)l(t,n)&&(e[n]=t[n]);return l(t,"toString")&&(e.toString=t.toStri

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.3, 1 pages
Category:	downloaded
Size (bytes):	709310
Entropy (8bit):	7.9068048983208685
Encrypted:	false
SSDEEP:	12288:xmGjHqyF9K7fXLqQdAk6IUNzdhV3W9SQaToLLnUCJqikf:IIK7n6tNzdhVGSQoCJW
MD5:	B83211854F16F7AA11CE227DE7497A27
SHA1:	C538EF38DDD60B57BDB18AE64BED849FC5952ABC
SHA-256:	BFC7C57841216A6FE04130773C6D2000979E9FB06EC194348C60F21C0EAC4594
SHA-512:	9EAA3AE3D00548E82B3407883BD10FAFFB39B2EE8302AC91C3A8EA35D80379212FB4A0276E7B9E53E37EFA460E46F230E93C8B963609CE0ADDFCA8B77DC04AAC
Malicious:	false
Reputation:	low
URL:	https://billing.waterboard.lk/OnlineBillingEmail/oTodKq4I3Q.pdf
Preview:	%PDF-1.3..1 0 obj..[/PDF /Text /ImageB /ImageC /ImageI]..endobj..12 0 obj..<< /Length 5616 /Filter /FlateDecode >> stream..X..]ms.6..~U..P........r...I\..Ol..r.. ..ol.....$...e...K..q.....F.A.._..O.dF...?27...h.IA.S.+...~C..(...I..F3.51YN..%'...).&J)r.D./..9.._J.9..Q.H.g...........,.k..TL....Lg..d\|Y....F...l......r5.'/...>O.rz.z..Hn..c).MP0y$_'+.......72.....a6.4%.....i.+........-rE.VQ4.K..j........}.Z.8.Fe..]T.f-..0.)...T.0F..c...m.G...b...cV.c!.1c=5r.5.G.E..........$.I..%.u.<oP...\|On..}...jN.j..z.l.+ .t..f.\7...<..W..%J7..5wsh......DX..K5,..gg..77=.{m.....M.s.....o.....3.....^...5.~\|;...Fn.....]..E...VZ......+B.Z(..3#..E.y(9.K%......I;N]...r....~.2./d...j..x{>>........(c\K.WY.5G.....,....q...e0.I..RM39..x7.$g.....N.m.1 .......T8]af..?.H.(.Y..^......\|%......Z..o..Q.......M...'%2&.+...V......J.%..{SMo,L.Ls......r.h...4.&5.N...`+...~N.!....L...BiP.xV....a+.b..t-......WhI....`...80i}.V8..h.$].f:.....J.f...;.N....+h.p.$]...0+...........q

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7662
Entropy (8bit):	7.962614473166796
Encrypted:	false
SSDEEP:	192:cpn4zn9n2vbd3MiccyXAR3E9Y4EmtROB1PwYi:cpvbd3fyXOdms1Phi
MD5:	371DFC6C0197065F8266645A63CE6311
SHA1:	85E82C08DF7CA8B24861495822B51A3305D2F67C
SHA-256:	6C4949AF8CD7AE13C88BA620A5ECD440231DEB5B4BCFC57B337B3D2EF9C28F27
SHA-512:	351B17D8AC0FC290AA248D40061AECB1A404749F99D95AAF11BBCD212EB3096C43A8FEE4F14402656C346FA1C6594411A5485A455A3462BBAB1664B9678FC4FA
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/appStore.png
Preview:	.PNG........IHDR.......a.....9..-....IDATx..........B.IIiCBE"...Jv.#Ie......(d....kiU.=%Kd...P..-...>s.y..,..........q=.<..3..o~3.MXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.}.....EQ..."u..!....kr.-.h!.h ..(.(.aaa.WpD..)..-..!.....6B..!.a.....x......!F.!........B..Q!...1..B.1.C...8......b.[..S4...ma.6..../.hf'..E.2s...........i.......>....\|!5...E.".........,,....XX.1,...Hc..\|&..~.R.D.6mD.n.D...._~.c.=...bq...G....'...../N>.d./_>....~Oe.,YR.UK.x.....3..s...J.r^}.U..~p.&M.....P..s..w;].tqz...t..]..v..N.B..T.N.2......\|..[....ow~..g.....s.g....N...-U.....8.6l(^}.U....kWR.~.}...{.....233.......].."N8..I..&oX...~....Ns..(T..(^.....D..7... . O..4i.DL.<.5.....]...5Y.{.=q.E..J..;.CL.6MT.XQ..6L..80)m....w.........[*.^.zb..b....B.e.yF.`.:j.(.yM..G,Y..u=.P....~..o.......z.!../.....>....e...w...._.u.".>.D...3.+.O>.....Q.k........8v.........j.)j.!~..G1s.LY&;(R......3._/~..w.a.0.3.8C.<xP.].6.Y......T.........tC_..]Z.__....O.....O...w..-..}A.u.1

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.405764584655452
Encrypted:	false
SSDEEP:	3:E6U/FfunInYn:E6SHY
MD5:	9207C8A2A37BF4921A4AB212FB3BC488
SHA1:	12584A6612BD44B7B39F64757E452C8E7B0016CB
SHA-256:	59C90297917B6AE354EDFDF419B2DAC829009CFCC379C9F5BC604FEEC8F8E1F7
SHA-512:	FA4B4845237A2000A74685528BDDD385D6DA805E9F7F7C3BA8636D885BBB3C3FDC1E5371C88C178ADE625DD512089AD9EC0A2FD406CE8B89E1A2A17ECD5FE968
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmpR05x4WcJcRIFDezksh0SBQ2DqFs9?alt=proto
Preview:	ChgKDQ3s5LIdGgYIARABGAMKBw2DqFs9GgA=

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 218 x 215, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	31438
Entropy (8bit):	7.983617327948372
Encrypted:	false
SSDEEP:	768:U3/pKHzhTyth26mCTi1fJbQi+T5zuCabIMtA9KFnffhtCm8haru:UxqzhT8h26aRb/+9uCtSA9KFnff3H8cy
MD5:	1D5CE80675D9D7197E2E6ED4929A2848
SHA1:	6B1BF35E4409CE95B2A5ABDD0A5C42ACB1D40EC8
SHA-256:	2BE2EAA99DDF30F4D6AA10E1AEF3E510136F2BFCBB0664EBD947185D1ED8E65B
SHA-512:	725A6A44B27AB24C10088F63D2F75CDC69B92B2AB5752DEAA3FAF22FC718C6C85B59C7E4B894367E5C289F3B98FE884D157149843894D8049B9F6AA1176BDB1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\|.O... .IDATx..wx\..?....H.IV.,K.{...f.6. ..%...M6.I6..f.d.?.Y..)..MB.$...@.B.......J.eIV.h..-............y.#.;.[....=.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(p......w..fr.B..E.C....../..!.C..............JD.}'.G.QE..y8#..y@....t]]).lW.RV;..R.r).+...B.B...@..8................A...C.":.Et...E.C..I......_.P^.......c.......W.U..._..3..N6._?............0..4X.l...IJ...hACU4...~S.3.B.BPW........!PU..+..]..Hr..t!m.d.I2...$..[..$-.dV...).MK)......WS.nM...Z.. }.o.;...F.....J....9.l9Lu.9Y.D...%^..F._.<.P..(.h...B..W.......Q.u....I..q.O.b e.IG.Y......&2..K.H).j..a.b.P..x.....S.(.m...+.J..R.k.r..2C.....Z...Wl0.lR].S...U..6.#!...d\..e.O..2....:dr...o..\.L.T.\|z.=.....\|..o..t.".B.W..R.... ....t.-.%lZ.s.}}..Qk.@.&.s{T.l.u.EWX...J@.\|uK..0)..8.....d.-.e.#..9CU....R......&u.......+.N8<w0M..Eg.+../....,....(.4M.+.M.D.y.I....8R..c..:...*.T......J..UE..E...:c.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (888), with no line terminators
Category:	downloaded
Size (bytes):	889
Entropy (8bit):	5.076267338402857
Encrypted:	false
SSDEEP:	24:0E0sKRoaGuMPOdbWPYbWeUAPLV+HC75j2a:0EPzh3HeUAPgHC7Rf
MD5:	5D3AEFB1D8F85CE2FF45E78CB8ACB881
SHA1:	F7C395A8494B7D2D1BC564DD3F79C7F320B2D9E0
SHA-256:	DCE8F95008953A2846FC790EA47773CCD1F27027A50BD879FF141ED0D20C1B67
SHA-512:	267E855C8577F532422BA3C3CC24ED55A8AD20F12EB97DD33B0FD66740314F80123D9757A0DA18738CBDCC5CB322111218F935B9FD7F0A737001E7FE9495A9D3
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="./favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Copyright . 2023 NWSDB"/><link rel="apple-touch-icon" href="./logo192.png"/><link href="https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap" rel="stylesheet"/><link href="https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;700&display=swap" rel="stylesheet"/><link rel="manifest" href="./manifest.json"/><title>National Water Supply & Drainage Board</title><script defer="defer" src="./static/js/main.dd47d300.js"></script><link href="./static/css/main.e6a39b54.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Reputation:	low
URL:	https://billing.waterboard.lk/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 218 x 215, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31438
Entropy (8bit):	7.983617327948372
Encrypted:	false
SSDEEP:	768:U3/pKHzhTyth26mCTi1fJbQi+T5zuCabIMtA9KFnffhtCm8haru:UxqzhT8h26aRb/+9uCtSA9KFnff3H8cy
MD5:	1D5CE80675D9D7197E2E6ED4929A2848
SHA1:	6B1BF35E4409CE95B2A5ABDD0A5C42ACB1D40EC8
SHA-256:	2BE2EAA99DDF30F4D6AA10E1AEF3E510136F2BFCBB0664EBD947185D1ED8E65B
SHA-512:	725A6A44B27AB24C10088F63D2F75CDC69B92B2AB5752DEAA3FAF22FC718C6C85B59C7E4B894367E5C289F3B98FE884D157149843894D8049B9F6AA1176BDB1A
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/logo192.png
Preview:	.PNG........IHDR.............\|.O... .IDATx..wx\..?....H.IV.,K.{...f.6. ..%...M6.I6..f.d.?.Y..)..MB.$...@.B.......J.eIV.h..-............y.#.;.[....=.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(p......w..fr.B..E.C....../..!.C..............JD.}'.G.QE..y8#..y@....t]]).lW.RV;..R.r).+...B.B...@..8................A...C.":.Et...E.C..I......_.P^.......c.......W.U..._..3..N6._?............0..4X.l...IJ...hACU4...~S.3.B.BPW........!PU..+..]..Hr..t!m.d.I2...$..[..$-.dV...).MK)......WS.nM...Z.. }.o.;...F.....J....9.l9Lu.9Y.D...%^..F._.<.P..(.h...B..W.......Q.u....I..q.O.b e.IG.Y......&2..K.H).j..a.b.P..x.....S.(.m...+.J..R.k.r..2C.....Z...Wl0.lR].S...U..6.#!...d\..e.O..2....:dr...o..\.L.T.\|z.=.....\|..o..t.".B.W..R.... ....t.-.%lZ.s.}}..Qk.@.&.s{T.l.u.EWX...J@.\|uK..0)..8.....d.-.e.#..9CU....R......&u.......+.N8<w0M..Eg.+../....,....(.4M.+.M.D.y.I....8R..c..:...*.T......J..UE..E...:c.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15262)
Category:	downloaded
Size (bytes):	15371
Entropy (8bit):	5.045848781497026
Encrypted:	false
SSDEEP:	192:szy27JXY07JXYY7JXYmFsf0sfPRxgJCpF4tipNSavv9B2mpkp:yLd5gRugpNfumm
MD5:	C2D0FDE18E9FF7486ECABC0C5BFAC418
SHA1:	CE126933A4D796D359992966424CC78E63907A2D
SHA-256:	1C232B1217EF24A7D2879F0C0F0C1AF5EAB4FA403F0C0EEC5EF3AF784B8C3AAB
SHA-512:	2079637794844FB4B9270A450AEA509DB10D5864BA6FA2831E0EF8E900D24CEF02CF1C99D52EA9BC94F70744F1AA5C58922420AB263AAFFA87791887365CF7C4
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/static/css/main.e6a39b54.css
Preview:	/.! tailwindcss v3.3.3 \| MIT License \| https://tailwindcss.com./*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;-webkit-font-feature-settings:normal;font-feature-settings:normal;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-variation-settings:normal;line-height:1.5;tab-size:4}body{line-height:inherit}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:re

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9365
Entropy (8bit):	7.962947300854329
Encrypted:	false
SSDEEP:	192:HtcOsXUW1THFhUXvsgocgskxNyASCjw8UdNDtlVP+D2a:NcOsiXzgsc8/CjwB+DN
MD5:	8CBECBA166482DB6283A392E8F4C5A24
SHA1:	F3E70C3D2327F0FB3CC35947848538090C591215
SHA-256:	80A60BBB15035763989484C02E03AE98F0EE8A82F05ECBC5C5C442B0AA898108
SHA-512:	B878617753F75FAE4A2DFBBFAFD6A2D8973D7DA87B508E8DEB40018767DBA3ECD87BB261C4D19D6867A10A43708E595881EA16161450F3FA1DA0FA3C3D3279E7
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/playStore.png
Preview:	.PNG........IHDR.......\......Ik^.. .IDATx..].x......n..G...(........b-^.h..Z.Q-J.....[..j..b.m.j.(7.....nAn9.....!......[fwvs.@H.....v..9........................QGaTrZ.*...........q..p#...:.H.....8[P.`....L....u...6.k..uklsh<......^...a....u............^.b....u.4...XG..i.p...fkh.....0.....Q...O....v..kh.;4..P.C}...........0.M.....@C..C3...z...44.14..........7......s.AII..Y.w.}......E...>\|8.~?....X.....\|..g..0x.`9'z...y....00l.0.j..S.L..]..o.n...P(.\|...W_E ..\|...1t.Pt...>..{....s.l..y.i..oFFF.f...[.F\|....;.S....b.K.."..O..'..$..um.m.VL.2E....h.\.R...?\|._~.8~..g..q....x..Y4.{...4M.b..9{.a..?...}7.........=F..)v....nII..0a.h.qx~RR..y..\|..."%%%.X...".....<97...q.F.5...%H..z.......w...3.lGzz...}...R..9.../.I...........1`....;,.m..'G.=...y....c.......w...d....(...s?..W/...WJw.W^Avv.\|.{....q.F.9S.9v.....=.Qx......J..w..............p..w.y..R.PZ.ZC....w.....]~..h.y$N...c.5./"......g.^.....]X.)Q..SO=%......5.\.qN......x......

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9576
Entropy (8bit):	5.3997296571084075
Encrypted:	false
SSDEEP:	192:rN5bN8NjNY3YNONCFNnNO6NfNANk3FNNN4YNYSNXpNgNjNS3mNuN4fNANUXNVNem:R5hKZ22EANOA1uCrDfxXvOZAMkwuUdbT
MD5:	DF845ACD692B2FFE5F46DB41E193E577
SHA1:	EFE7149445972A9FF473B89CFB3C873D2F7BB3C9
SHA-256:	8E878B38C0C357B63EB23D45C6182FD4F1AC0E92A5601A7E27F04EDCFAD5B4AF
SHA-512:	6D487DD5B7ACA59F0E185856C842708958A25B6832C5BB3C8F29AB4FA7FC2C2C6ADF8931DCB6EFB0E4F1E738188D8F9B2765147F371035AD156B35664C832758
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	33846
Entropy (8bit):	7.988119186726714
Encrypted:	false
SSDEEP:	768:DNmg18KE8IiT9oRVrP6BZuHPgL94+NKesz:E88KNI0uRVrySHG9de
MD5:	AD7CF96523F990DEF4DD4C89EC1DEC47
SHA1:	C1464C068E68452B39296229E95973943DF04298
SHA-256:	55502965AD70E7F68FF7CF7EBE10FB1E354DB36859FB8881D4F98AC98CEF159B
SHA-512:	28E97689C4A5A059F9309730D5C5EFCB824259612FF8D77A1681BC8E6CD0E819F3E6AAE520C5BAF094BFC173999D2068FE411DFDC615BEDA2A24ACC67951524A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X.... .IDATx..}.x\...{..^.d.r.bl...1.....J..BOh......BBH..z..6...w..V..n..9...lI.%.\..g...2w..6s....B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B...?...ry.c...J......o.......c. ..b....;kUV.?........\~/.....w..x...,0H.........1V.h,W.X...i.T....,.L....z.......,..-.t..HL.(FDA.I..EAh.$....^..@.....Z.U.b.l...x[)..R.v..j.......'.....Z....V..x9....c.7/)i.\|].#)...xo3..............}...!]..'. H.F=`.0.......,.D_0.%.t1.&.....)..Af..ECPe.G.....Qt.Q....A'..:.;t..Q'..EI.#.h.!(.....)..).......k.%.(.#.l..hc.L.A....f.....YV.N..yV.."...d.E8...:=.f. ..u,.[..4D4..Q..2x"@s@AmPF.O34............L........F/.;.:..K.wzI. ..%..O.`......-.tY....fG.vrT..4.lI....=..u(q../S.>....t......"Q.fM.R..{(.AV.%.E/A...$...`.1.u..[.%..(/.i....r+..$....+......a.....$..(..Mza.^/............"........U.....R....zI.`v.$.s.10O..y&..4#.".)' .....>..^......*........"...Qcv..."2.....$.P.@/1.$.F"....Q@.I.,...6...D.....P..Q..cR.........[."X_.6.rE.j

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9365
Entropy (8bit):	7.962947300854329
Encrypted:	false
SSDEEP:	192:HtcOsXUW1THFhUXvsgocgskxNyASCjw8UdNDtlVP+D2a:NcOsiXzgsc8/CjwB+DN
MD5:	8CBECBA166482DB6283A392E8F4C5A24
SHA1:	F3E70C3D2327F0FB3CC35947848538090C591215
SHA-256:	80A60BBB15035763989484C02E03AE98F0EE8A82F05ECBC5C5C442B0AA898108
SHA-512:	B878617753F75FAE4A2DFBBFAFD6A2D8973D7DA87B508E8DEB40018767DBA3ECD87BB261C4D19D6867A10A43708E595881EA16161450F3FA1DA0FA3C3D3279E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\......Ik^.. .IDATx..].x......n..G...(........b-^.h..Z.Q-J.....[..j..b.m.j.(7.....nAn9.....!......[fwvs.@H.....v..9........................QGaTrZ.*...........q..p#...:.H.....8[P.`....L....u...6.k..uklsh<......^...a....u............^.b....u.4...XG..i.p...fkh.....0.....Q...O....v..kh.;4..P.C}...........0.M.....@C..C3...z...44.14..........7......s.AII..Y.w.}......E...>\|8.~?....X.....\|..g..0x.`9'z...y....00l.0.j..S.L..]..o.n...P(.\|...W_E ..\|...1t.Pt...>..{....s.l..y.i..oFFF.f...[.F\|....;.S....b.K.."..O..'..$..um.m.VL.2E....h.\.R...?\|._~.8~..g..q....x..Y4.{...4M.b..9{.a..?...}7.........=F..)v....nII..0a.h.qx~RR..y..\|..."%%%.X...".....<97...q.F.5...%H..z.......w...3.lGzz...}...R..9.../.I...........1`....;,.m..'G.=...y....c.......w...d....(...s?..W/...WJw.W^Avv.\|.{....q.F.9S.9v.....=.Qx......J..w..............p..w.y..R.PZ.ZC....w.....]~..h.y$N...c.5./"......g.^.....]X.)Q..SO=%......5.\.qN......x......

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	33846
Entropy (8bit):	7.988119186726714
Encrypted:	false
SSDEEP:	768:DNmg18KE8IiT9oRVrP6BZuHPgL94+NKesz:E88KNI0uRVrySHG9de
MD5:	AD7CF96523F990DEF4DD4C89EC1DEC47
SHA1:	C1464C068E68452B39296229E95973943DF04298
SHA-256:	55502965AD70E7F68FF7CF7EBE10FB1E354DB36859FB8881D4F98AC98CEF159B
SHA-512:	28E97689C4A5A059F9309730D5C5EFCB824259612FF8D77A1681BC8E6CD0E819F3E6AAE520C5BAF094BFC173999D2068FE411DFDC615BEDA2A24ACC67951524A
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/wlogo.png
Preview:	.PNG........IHDR..............X.... .IDATx..}.x\...{..^.d.r.bl...1.....J..BOh......BBH..z..6...w..V..n..9...lI.%.\..g...2w..6s....B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B.)..B...?...ry.c...J......o.......c. ..b....;kUV.?........\~/.....w..x...,0H.........1V.h,W.X...i.T....,.L....z.......,..-.t..HL.(FDA.I..EAh.$....^..@.....Z.U.b.l...x[)..R.v..j.......'.....Z....V..x9....c.7/)i.\|].#)...xo3..............}...!]..'. H.F=`.0.......,.D_0.%.t1.&.....)..Af..ECPe.G.....Qt.Q....A'..:.;t..Q'..EI.#.h.!(.....)..).......k.%.(.#.l..hc.L.A....f.....YV.N..yV.."...d.E8...:=.f. ..u,.[..4D4..Q..2x"@s@AmPF.O34............L........F/.;.:..K.wzI. ..%..O.`......-.tY....fG.vrT..4.lI....=..u(q../S.>....t......"Q.fM.R..{(.AV.%.E/A...$...`.1.u..[.%..(/.i....r+..$....+......a.....$..(..Mza.^/............"........U.....R....zI.`v.$.s.10O..y&..4#.".)' .....>..^......*........"...Qcv..."2.....$.P.@/1.$.F"....Q@.I.,...6...D.....P..Q..cR.........[."X_.6.rE.j

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	492
Entropy (8bit):	4.508040222190771
Encrypted:	false
SSDEEP:	6:3vjkpO/Eqh/bwXLjQLMzmezk7TWKAKLkmXrdEJqJHGezXXdKLkmXcqJHGez1mjgw:fYDqJeLQq/KvriSdKvqUKV/cDTO
MD5:	D9D975CEBE2EC20B6C652E1E4C12CCF0
SHA1:	4E0AFE7F81A71F41366CD7859CA34776B8107923
SHA-256:	50B3D8C3903AF3F78D871B94557AB14F4E39CA192EACA3D2CFA863C867279A14
SHA-512:	50EF3C4963B89C9DBA094705B6DF105E5C82F8DB708059DF6A48A3F95C43487B7CCBEB9840E7B76074896DB5FB2F1D918326D0CE338220589CD275F9EE79B16C
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/manifest.json
Preview:	{. "short_name": "React App",. "name": "Create React App Sample",. "icons": [. {. "src": "favicon.ico",. "sizes": "64x64 32x32 24x24 16x16",. "type": "image/x-icon". },. {. "src": "logo192.png",. "type": "image/png",. "sizes": "192x192". },. {. "src": "logo512.png",. "type": "image/png",. "sizes": "512x512". }. ],. "start_url": ".",. "display": "standalone",. "theme_color": "#000000",. "background_color": "#ffffff".}.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	267320
Entropy (8bit):	5.349879218112604
Encrypted:	false
SSDEEP:	3072:AoCoPu2NfOhOW7M/aqkf/Q/wIZq+F4cKLh3uGnNuE4:AwfpWI/arkxb6LhFNuE4
MD5:	3448F51832DD8CCE4724EA443E6FAFE5
SHA1:	3AF4ED34629E23719A025CF490EA902A44213097
SHA-256:	73EC4B48C190B4D888FE1AC5A6636391F5AB039263A998AE1850F9BC867F0A0C
SHA-512:	33FC93A8ABBDE2EDD3475E8493CD61A1C2D831E67AD2723A89F8F0004782AA0B135EA910549DF381805640698003143743F4E4CA52C08D87813A7CFBAEA5ABF8
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.dd47d300.js.LICENSE.txt /.!function(){var e={426:function(e,t,n){(e=n.nmd(e)).exports=function(){"use strict";var t,n;function r(){return t.apply(null,arguments)}function a(e){t=e}function i(e){return e instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(e)}function o(e){return null!=e&&"[object Object]"===Object.prototype.toString.call(e)}function l(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function u(e){if(Object.getOwnPropertyNames)return 0===Object.getOwnPropertyNames(e).length;var t;for(t in e)if(l(e,t))return!1;return!0}function s(e){return void 0===e}function c(e){return"number"===typeof e\|\|"[object Number]"===Object.prototype.toString.call(e)}function f(e){return e instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(e)}function d(e,t){var n,r=[],a=e.length;for(n=0;n<a;++n)r.push(t(e[n],n));return r}function h(e,t){for(var n in t)l(t,n)&&(e[n]=t[n]);return l(t,"toString")&&(e.toString=t.toStri

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 218 x 215, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	31438
Entropy (8bit):	7.983617327948372
Encrypted:	false
SSDEEP:	768:U3/pKHzhTyth26mCTi1fJbQi+T5zuCabIMtA9KFnffhtCm8haru:UxqzhT8h26aRb/+9uCtSA9KFnff3H8cy
MD5:	1D5CE80675D9D7197E2E6ED4929A2848
SHA1:	6B1BF35E4409CE95B2A5ABDD0A5C42ACB1D40EC8
SHA-256:	2BE2EAA99DDF30F4D6AA10E1AEF3E510136F2BFCBB0664EBD947185D1ED8E65B
SHA-512:	725A6A44B27AB24C10088F63D2F75CDC69B92B2AB5752DEAA3FAF22FC718C6C85B59C7E4B894367E5C289F3B98FE884D157149843894D8049B9F6AA1176BDB1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\|.O... .IDATx..wx\..?....H.IV.,K.{...f.6. ..%...M6.I6..f.d.?.Y..)..MB.$...@.B.......J.eIV.h..-............y.#.;.[....=.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(p......w..fr.B..E.C....../..!.C..............JD.}'.G.QE..y8#..y@....t]]).lW.RV;..R.r).+...B.B...@..8................A...C.":.Et...E.C..I......_.P^.......c.......W.U..._..3..N6._?............0..4X.l...IJ...hACU4...~S.3.B.BPW........!PU..+..]..Hr..t!m.d.I2...$..[..$-.dV...).MK)......WS.nM...Z.. }.o.;...F.....J....9.l9Lu.9Y.D...%^..F._.<.P..(.h...B..W.......Q.u....I..q.O.b e.IG.Y......&2..K.H).j..a.b.P..x.....S.(.m...+.J..R.k.r..2C.....Z...Wl0.lR].S...U..6.#!...d\..e.O..2....:dr...o..\.L.T.\|z.=.....\|..o..t.".B.W..R.... ....t.-.%lZ.s.}}..Qk.@.&.s{T.l.u.EWX...J@.\|uK..0)..8.....d.-.e.#..9CU....R......&u.......+.N8<w0M..Eg.+../....,....(.4M.+.M.D.y.I....8R..c..:...*.T......J..UE..E...:c.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 97, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7662
Entropy (8bit):	7.962614473166796
Encrypted:	false
SSDEEP:	192:cpn4zn9n2vbd3MiccyXAR3E9Y4EmtROB1PwYi:cpvbd3fyXOdms1Phi
MD5:	371DFC6C0197065F8266645A63CE6311
SHA1:	85E82C08DF7CA8B24861495822B51A3305D2F67C
SHA-256:	6C4949AF8CD7AE13C88BA620A5ECD440231DEB5B4BCFC57B337B3D2EF9C28F27
SHA-512:	351B17D8AC0FC290AA248D40061AECB1A404749F99D95AAF11BBCD212EB3096C43A8FEE4F14402656C346FA1C6594411A5485A455A3462BBAB1664B9678FC4FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....9..-....IDATx..........B.IIiCBE"...Jv.#Ie......(d....kiU.=%Kd...P..-...>s.y..,..........q=.<..3..o~3.MXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.}.....EQ..."u..!....kr.-.h!.h ..(.(.aaa.WpD..)..-..!.....6B..!.a.....x......!F.!........B..Q!...1..B.1.C...8......b.[..S4...ma.6..../.hf'..E.2s...........i.......>....\|!5...E.".........,,....XX.1,...Hc..\|&..~.R.D.6mD.n.D...._~.c.=...bq...G....'...../N>.d./_>....~Oe.,YR.UK.x.....3..s...J.r^}.U..~p.&M.....P..s..w;].tqz...t..]..v..N.B..T.N.2......\|..[....ow~..g.....s.g....N...-U.....8.6l(^}.U....kWR.~.}...{.....233.......].."N8..I..&oX...~....Ns..(T..(^.....D..7... . O..4i.DL.<.5.....]...5Y.{.=q.E..J..;.CL.6MT.XQ..6L..80)m....w.........[*.^.zb..b....B.e.yF.`.:j.(.yM..G,Y..u=.P....~..o.......z.!../.....>....e...w...._.u.".>.D...3.+.O>.....Q.k........8v.........j.)j.!~..G1s.LY&;(R......3._/~..w.a.0.3.8C.<xP.].6.Y......T.........tC_..]Z.__....O.....O...w..-..}A.u.1

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 218 x 215, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31438
Entropy (8bit):	7.983617327948372
Encrypted:	false
SSDEEP:	768:U3/pKHzhTyth26mCTi1fJbQi+T5zuCabIMtA9KFnffhtCm8haru:UxqzhT8h26aRb/+9uCtSA9KFnff3H8cy
MD5:	1D5CE80675D9D7197E2E6ED4929A2848
SHA1:	6B1BF35E4409CE95B2A5ABDD0A5C42ACB1D40EC8
SHA-256:	2BE2EAA99DDF30F4D6AA10E1AEF3E510136F2BFCBB0664EBD947185D1ED8E65B
SHA-512:	725A6A44B27AB24C10088F63D2F75CDC69B92B2AB5752DEAA3FAF22FC718C6C85B59C7E4B894367E5C289F3B98FE884D157149843894D8049B9F6AA1176BDB1A
Malicious:	false
Reputation:	low
URL:	https://ebis.waterboard.lk/ebill/favicon.ico
Preview:	.PNG........IHDR.............\|.O... .IDATx..wx\..?....H.IV.,K.{...f.6. ..%...M6.I6..f.d.?.Y..)..MB.$...@.B.......J.eIV.h..-............y.#.;.[....=.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(P.@.....(p......w..fr.B..E.C....../..!.C..............JD.}'.G.QE..y8#..y@....t]]).lW.RV;..R.r).+...B.B...@..8................A...C.":.Et...E.C..I......_.P^.......c.......W.U..._..3..N6._?............0..4X.l...IJ...hACU4...~S.3.B.BPW........!PU..+..]..Hr..t!m.d.I2...$..[..$-.dV...).MK)......WS.nM...Z.. }.o.;...F.....J....9.l9Lu.9Y.D...%^..F._.<.P..(.h...B..W.......Q.u....I..q.O.b e.IG.Y......&2..K.H).j..a.b.P..x.....S.(.m...+.J..R.k.r..2C.....Z...Wl0.lR].S...U..6.#!...d\..e.O..2....:dr...o..\.L.T.\|z.=.....\|..o..t.".B.W..R.... ....t.-.%lZ.s.}}..Qk.@.&.s{T.l.u.EWX...J@.\|uK..0)..8.....d.-.e.#..9CU....R......&u.......+.N8<w0M..Eg.+../....,....(.4M.+.M.D.y.I....8R..c..:...*.T......J..UE..E...:c.

Static File Info

⊘No static file info

File Icon


Icon Hash:	00b29a8e86828200

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:24:11.604989052 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:11.605144024 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:11.714400053 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:21.208614111 CET	49675	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:21.208673954 CET	49674	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:21.325978994 CET	49673	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:21.839487076 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:21.839529037 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:21.839605093 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:21.840095043 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:21.840121031 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:21.840257883 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:21.840384960 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:21.840403080 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:21.840687037 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:21.840699911 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:22.569091082 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:22.569123983 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:22.569191933 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:22.569437981 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:22.569452047 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:23.143832922 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.146087885 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.146102905 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.147140026 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.147221088 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.148497105 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.148565054 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.148952007 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.148958921 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.202120066 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.216300964 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.216689110 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.216722012 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.218185902 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.218271017 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.218619108 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.218699932 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.224179029 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:23.224378109 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:23.224395990 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:23.226246119 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:23.226324081 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:23.227325916 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:23.227406025 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:23.269649029 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:23.269669056 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:23.269742966 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.269774914 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.313635111 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:23.314022064 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.319761992 CET	443	49703	23.1.237.91	192.168.2.5
Nov 20, 2024 03:24:23.319895983 CET	49703	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:23.423099041 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:23.423115015 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:23.423207998 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:23.425156116 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:23.425168991 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:23.503142118 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.545825005 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.545835018 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.552521944 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.552583933 CET	443	49712	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:23.552697897 CET	49712	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.577250004 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:23.623339891 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.146507978 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.146598101 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.150684118 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.150693893 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.151072979 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.155332088 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.155365944 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.155376911 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.155396938 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.155410051 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.155420065 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.155421972 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.155440092 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.155467033 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.155491114 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.164820910 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.164853096 CET	443	49711	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.164906025 CET	49711	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.169044018 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.169069052 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.169116974 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.169699907 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:24.169708014 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:24.201119900 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.206629992 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.247334957 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.473449945 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.473530054 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.473582983 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.473664045 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.473673105 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.473685980 CET	49714	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.473690033 CET	443	49714	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.532051086 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.532082081 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:24.532150030 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.532426119 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:24.532438040 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.106379986 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.106722116 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.106738091 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.108234882 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.108299017 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.108710051 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.108797073 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.108829021 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.151328087 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.153439999 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.153448105 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.200634956 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.230125904 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.230209112 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:25.243098021 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:25.243109941 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.243562937 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.246115923 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:25.291321993 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.559158087 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.559237957 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.559390068 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:25.683681965 CET	49719	443	192.168.2.5	184.28.90.27
Nov 20, 2024 03:24:25.683711052 CET	443	49719	184.28.90.27	192.168.2.5
Nov 20, 2024 03:24:25.977041006 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977104902 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977125883 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977160931 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977164030 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.977190018 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977219105 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.977229118 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977247953 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977287054 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977291107 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:25.977312088 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:25.977339029 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.023504972 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.216933966 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:26.216999054 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.217114925 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:26.217900038 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:26.217928886 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.219163895 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.219186068 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.219228029 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.219245911 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.219266891 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.219278097 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.219286919 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.219297886 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.219310045 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.219325066 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.219379902 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.459811926 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.459832907 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.459884882 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.459897041 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.459913969 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.459953070 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.459973097 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.461647987 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.461692095 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.461745977 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.461755037 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.461764097 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.461994886 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.462002039 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.512854099 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.700553894 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.700570107 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.700592041 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.700628042 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.700634956 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.700651884 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.700680971 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.700697899 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.856893063 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.856976032 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:26.861663103 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:26.861679077 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.861924887 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.870809078 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:26.915345907 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.942831993 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.942883015 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.942919016 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.942939997 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.942980051 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.942991018 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:26.943001986 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.943077087 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:26.975797892 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.975830078 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.975842953 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.975891113 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:26.975904942 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:26.976033926 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.057979107 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.058002949 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.058281898 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.058315992 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.058383942 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.061481953 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.061497927 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.061629057 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.061630011 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.061646938 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.063901901 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.144372940 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.144395113 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.144587040 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.144587040 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.144620895 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.144742012 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.145931959 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.145951986 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.146097898 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.146114111 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.146415949 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.146945953 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.146976948 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.147018909 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.147032022 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.147066116 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.147202969 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.148514032 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.148531914 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.148581028 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.148592949 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.148633957 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.148781061 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.184979916 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.185007095 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.185050964 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.185086012 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.185086012 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.185100079 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.185111046 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.185118914 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.185183048 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.231359959 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.231384039 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.231595993 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.231626034 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.231874943 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.232798100 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.232817888 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.232912064 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.232933044 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.232956886 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.233263969 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.233654022 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.233670950 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.233760118 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.233772039 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.234029055 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.235382080 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.235399961 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.235481024 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.235492945 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.235647917 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.236387968 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.236407042 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.236550093 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.236562014 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.236687899 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.238156080 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.238173962 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.238212109 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.238250971 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.238261938 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.238281965 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.238305092 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.238440037 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.238476038 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.238476038 CET	49720	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.238496065 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.238517046 CET	443	49720	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.295367956 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.295403957 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.295519114 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.296407938 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.296484947 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.296597004 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.296901941 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.296912909 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.296921015 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.296958923 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.297683001 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.297700882 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.297857046 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.297930956 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.297938108 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.298049927 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.298077106 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.298788071 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.298804045 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.298835993 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.298945904 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.298957109 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.299020052 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.299338102 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.299350023 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.429275036 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.429300070 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.429363966 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.429377079 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.429414988 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.429423094 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.429461002 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.429552078 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.671437025 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.671454906 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.671480894 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.671514034 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.671524048 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:27.671595097 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.671595097 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:27.932634115 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.933432102 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.933460951 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.933845043 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.933851004 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.938658953 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.939059973 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.939073086 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.939635038 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.939640045 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.944576025 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.945051908 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.945076942 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.945103884 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.945230007 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.945235968 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.945348978 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.945417881 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.945724964 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.945744991 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.971914053 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.972378969 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.972402096 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:27.972815037 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:27.972822905 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.035228014 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.035288095 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.035548925 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.035548925 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.035625935 CET	49721	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.035644054 CET	443	49721	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.036875963 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.036899090 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.037019014 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.037028074 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.037149906 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.037168980 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.037168980 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.037178993 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.037358999 CET	49723	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.037364006 CET	443	49723	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.038503885 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.038535118 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.038621902 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.038780928 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.038799047 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.039628029 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.039664984 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.039827108 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.039935112 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.039943933 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.043559074 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.043634892 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.043766022 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.043766022 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.043957949 CET	49725	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.043967009 CET	443	49725	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.046724081 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.046752930 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.046823978 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.046843052 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.046857119 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.046861887 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.046962023 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.046962023 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.046977997 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.046989918 CET	49722	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.046993971 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.046994925 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.047055960 CET	443	49722	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.047194958 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.047204018 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.049046040 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.049068928 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.049129963 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.049230099 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.049242020 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.113935947 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.113957882 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.114048004 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.114062071 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.114108086 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.114167929 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.114217043 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.114331961 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.114355087 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.114367008 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.114373922 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.114384890 CET	49724	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.114387989 CET	443	49724	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.117753029 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.117784977 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.118031979 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.118031979 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.118060112 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.154892921 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.154921055 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.154968023 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.155021906 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.155038118 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.155059099 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.155258894 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.396892071 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.396925926 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.396975994 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.397030115 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.397047997 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.397100925 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.397100925 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.641796112 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.641815901 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.641838074 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.641891003 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.641910076 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.641951084 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.672148943 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.672899008 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.672910929 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.673506021 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.673511028 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.682200909 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.682517052 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.682533026 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.682877064 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.682881117 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.683305025 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.683594942 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.683608055 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.683938026 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.683942080 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.719441891 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.719975948 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.719995975 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.720437050 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.720442057 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.753082037 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.753572941 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.753587008 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.754009962 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.754014969 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.772125959 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.772187948 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.772294044 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.772567987 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.772583961 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.772594929 CET	49726	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.772600889 CET	443	49726	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.776309013 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.776329994 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.776415110 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.776573896 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.776582003 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.781512022 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.781580925 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.781661987 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.782975912 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.783050060 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.783123970 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.784060001 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.784079075 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.784090042 CET	49727	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.784096003 CET	443	49727	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.784322977 CET	49729	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.784332991 CET	443	49729	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.791014910 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.791037083 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.791069031 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.791073084 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.791158915 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.791270971 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.791270971 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.791285992 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.791399956 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.791409016 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.828509092 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.828591108 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.828798056 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.828871965 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.828881979 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.828891039 CET	49728	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.828895092 CET	443	49728	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.831995010 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.832036018 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.832113981 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.832278013 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.832287073 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.853593111 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.853657961 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.853719950 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.853903055 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.853909016 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.853919983 CET	49730	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.853923082 CET	443	49730	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.856648922 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.856667995 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.856743097 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.856949091 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:28.856960058 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:28.883145094 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.883163929 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.883208036 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.883239031 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:28.883250952 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:28.883476019 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.125375032 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.125410080 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.125463009 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.125535011 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.125549078 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.125575066 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.125602961 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.366398096 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.366415024 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.366455078 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.366585970 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.366612911 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.366640091 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.366662025 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.367017031 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.367041111 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.367072105 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.367078066 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.367110014 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.367134094 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.422272921 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.423271894 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.423289061 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.424006939 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.424011946 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.427686930 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.428172112 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.428204060 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.428575993 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.428580999 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.438465118 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.438937902 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.438945055 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.439343929 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.439348936 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.481246948 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.482269049 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.482290030 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.482888937 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.482893944 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.505296946 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.505943060 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.506026030 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.506362915 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.506397009 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.527184010 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.527276993 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.527365923 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.527487040 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.527524948 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.527545929 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.527606010 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.527606010 CET	49733	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.527640104 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.527667999 CET	443	49733	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.527671099 CET	49732	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.527679920 CET	443	49732	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.530622005 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.530659914 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.530769110 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.530913115 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.530927896 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.530956984 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.530973911 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.531039953 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.531362057 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.531374931 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.550416946 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.550573111 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.550664902 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.550785065 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.550793886 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.550837040 CET	49731	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.550842047 CET	443	49731	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.553843975 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.553858995 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.553956985 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.554141998 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.554152012 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.587114096 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.587198973 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.587323904 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.587565899 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.587580919 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.587590933 CET	49734	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.587596893 CET	443	49734	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.590866089 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.590888023 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.590975046 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.591188908 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.591198921 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.608469963 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.608589888 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.609359980 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.609407902 CET	443	49717	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.609446049 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.609483004 CET	49717	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.609509945 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.609582901 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.609798908 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.609823942 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.609838963 CET	49735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.609847069 CET	443	49735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.614038944 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.614068985 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.614160061 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.614290953 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:29.614305973 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:29.647470951 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.647501945 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.647597075 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.647907019 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.647921085 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.648458958 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.648498058 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.648672104 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.648869038 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.648884058 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.648953915 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.649214983 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.649225950 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:29.649328947 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:29.649339914 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.167174101 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.178956032 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.204905987 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.214066982 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.230330944 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.258194923 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.277436972 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.280668020 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.295259953 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:30.295291901 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:30.295358896 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:30.295413017 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.295425892 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.327940941 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.505433083 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.505460024 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.506026983 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.506059885 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.506575108 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.506581068 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.506906986 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.506922960 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.507272959 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.507278919 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.507653952 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.507684946 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.508322954 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.508328915 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.508702040 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.508713961 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.508892059 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:30.508924007 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:30.509018898 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:30.509463072 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.509468079 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.509608984 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:30.509632111 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:30.511626959 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:30.511639118 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:30.534440994 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.534482002 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.534554005 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.535001993 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.535015106 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.590048075 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.590667009 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.590682030 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.591747999 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.591873884 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.593550920 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.593619108 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.593635082 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.601584911 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.601896048 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.601944923 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.602019072 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.602035999 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.602050066 CET	49737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.602056026 CET	443	49737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.602175951 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.602471113 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.602497101 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.602886915 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.603188992 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.603354931 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.603423119 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.603524923 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.603528976 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.603543997 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.605005026 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.605120897 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.605149984 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.605151892 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.605264902 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.605319023 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.605453014 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.605504990 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.605529070 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.605552912 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.605576992 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.605585098 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.605804920 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.605851889 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.606025934 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.606044054 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.606055975 CET	49736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.606060982 CET	443	49736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.606076956 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.606081009 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.606092930 CET	49739	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.606096029 CET	443	49739	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.606100082 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.606344938 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.606391907 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.610816002 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.610822916 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.610832930 CET	49738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.610836983 CET	443	49738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.611403942 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.611414909 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.611426115 CET	49740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.611430883 CET	443	49740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.613843918 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.613866091 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.613941908 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.614871979 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.614883900 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.615638971 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.615669012 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.615732908 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.616072893 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.616087914 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.616869926 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.616878986 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.616938114 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.617134094 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.617145061 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.617440939 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.617461920 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.617552042 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.618654013 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.618666887 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.618688107 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.618726969 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.618776083 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.619083881 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:30.619098902 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:30.635329962 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.635795116 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.635802031 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.645673037 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:30.645703077 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:30.645812988 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:30.647036076 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:30.647048950 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:30.647326946 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.651333094 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.655335903 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.655370951 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:30.685828924 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:30.703831911 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:31.252588034 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.253439903 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.253469944 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.253921986 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.253928900 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.254404068 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.254720926 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.254734039 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.255095005 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.255098104 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.266376972 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.266836882 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.266850948 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.267196894 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.267258883 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.267262936 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.267636061 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.267656088 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.268369913 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.268374920 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.286257982 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.286714077 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.286745071 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:31.287308931 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:31.287324905 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.378763914 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.378776073 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.378846884 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.378942966 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.378973961 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379033089 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379136086 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379138947 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379156113 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379158974 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379167080 CET	49751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379172087 CET	443	49751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379175901 CET	49750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379180908 CET	443	49750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379585981 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379601955 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379645109 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379688025 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379688025 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379729986 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379873037 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379887104 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.379899979 CET	49752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.379904032 CET	443	49752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.380024910 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.380037069 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.380047083 CET	49749	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.380052090 CET	443	49749	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.380645037 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.380800009 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.380851984 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.380969048 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.380984068 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.381000042 CET	49753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.381005049 CET	443	49753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.382997036 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383018970 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383027077 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383039951 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383048058 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383053064 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383073092 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.383083105 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383127928 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.383142948 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.383166075 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.383218050 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.383421898 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383449078 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383526087 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.383533955 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383686066 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383728981 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.383740902 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383761883 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383778095 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.383783102 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383789062 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.383805990 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383821011 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.383827925 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.383866072 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.383887053 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.383887053 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.383896112 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.384202003 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.384208918 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.384392023 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.384424925 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.384471893 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.384587049 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.384598017 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.384778023 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.384794950 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.384911060 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.384922028 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.384963036 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.385004044 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.385010958 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.385051012 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.385093927 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.385109901 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.385180950 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:32.385189056 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:32.389159918 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.389328957 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.389919996 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.389931917 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.390470982 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.390896082 CET	443	49743	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.390960932 CET	49743	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.391422987 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.391480923 CET	443	49742	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.391525030 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.391525030 CET	49742	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.393606901 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.393639088 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.393655062 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.393676996 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.393737078 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.393940926 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.393966913 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.394010067 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.394234896 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.394246101 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.394603968 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.394779921 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.394814968 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.394829035 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.394963980 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.394984007 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.400713921 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.400726080 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.400757074 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.400789022 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.400799036 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.400809050 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.400839090 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.400851011 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.400866985 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.400892973 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.401305914 CET	49741	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.401315928 CET	443	49741	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.402261019 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:32.402333021 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:32.408762932 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:32.408782959 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:32.409193993 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:32.416611910 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.416656017 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.416726112 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.417000055 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.417042017 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.417093039 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.417223930 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.417254925 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.417367935 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.417382956 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.436170101 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.443892956 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.443928957 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.444013119 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.444209099 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:32.444226027 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:32.452864885 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:32.735490084 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.736038923 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.736067057 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.737664938 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.737710953 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.739049911 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.739057064 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.739168882 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.739286900 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.739298105 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.739658117 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.739667892 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.742399931 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.742446899 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.743417978 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.743496895 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.781239033 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.795671940 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.795681953 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:32.835882902 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:32.955708027 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.007661104 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.030651093 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.042452097 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.043829918 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.051477909 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.051492929 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.051953077 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.051956892 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.052256107 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.052269936 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.052614927 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.052619934 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.076735973 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.076816082 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.076982975 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.077003956 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.077182055 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.096129894 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.097171068 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.097187042 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.097660065 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.097671986 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.098067999 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.098078966 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.098479033 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.098488092 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.098893881 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.098916054 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.099247932 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.099253893 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.099848032 CET	49746	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.099854946 CET	443	49746	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.100955009 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.107611895 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.144021034 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:33.144191027 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:33.144247055 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:33.147336006 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.149847984 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.149919033 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.149970055 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.150113106 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.150135040 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.150146008 CET	49759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.150151014 CET	443	49759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.152479887 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.152515888 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.152582884 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.152719975 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.152761936 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.154980898 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.155066967 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.155116081 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.155231953 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.155237913 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.155247927 CET	49757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.155251026 CET	443	49757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.155337095 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.157386065 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.157417059 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.157591105 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.157591105 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.157622099 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.195205927 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.195388079 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.195696115 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.199906111 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.199906111 CET	49756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.199924946 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.199935913 CET	443	49756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.200556993 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.200725079 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.200892925 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.206516027 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.206516027 CET	49755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.206540108 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.206552982 CET	443	49755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.211251020 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.211275101 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.211471081 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.211849928 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.211869955 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.212970972 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.213020086 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.213105917 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.213222027 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.213241100 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.231385946 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.231548071 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.231617928 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.244384050 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.244457006 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.244488955 CET	49758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.244507074 CET	443	49758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.248245001 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.248281956 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.248346090 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.248471022 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.248485088 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.275556087 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.275585890 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.275593996 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.275635958 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.275650978 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.275664091 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.275718927 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.350749969 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.351115942 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.351527929 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.351592064 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.351815939 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.351830006 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.352700949 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.352922916 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.352931023 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.353965998 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.354022026 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.354315042 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.354378939 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.354984999 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.355047941 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.355420113 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.355483055 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.355520010 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.355736017 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.356056929 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.356218100 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.356225014 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.356229067 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.356606960 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.356623888 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.356705904 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.356713057 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.356719017 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.359139919 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.359162092 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.362323999 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.362407923 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.363814116 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.363894939 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.363980055 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.363993883 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.367254972 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367280960 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367289066 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367300987 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367331982 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367338896 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.367362976 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367396116 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.367419004 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.367814064 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367886066 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.367888927 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.367954016 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.380837917 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.381205082 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.381215096 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.382117033 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.382627010 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.382746935 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.382790089 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.404035091 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.404035091 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.404156923 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.404156923 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.436084032 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.517822027 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.517842054 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.517889023 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.517905951 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.517944098 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.517959118 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.517959118 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.517963886 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.518007994 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.724208117 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.724422932 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.724488020 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.725125074 CET	49747	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.725162983 CET	443	49747	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.729872942 CET	49713	443	192.168.2.5	142.250.185.164
Nov 20, 2024 03:24:33.729903936 CET	443	49713	142.250.185.164	192.168.2.5
Nov 20, 2024 03:24:33.766463995 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.766478062 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.766520977 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.766540051 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.766550064 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.766599894 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.768104076 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.768126011 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.768166065 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.768172026 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.768220901 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:33.778556108 CET	49703	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:33.778625965 CET	49703	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:33.779545069 CET	49775	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:33.779582977 CET	443	49775	23.1.237.91	192.168.2.5
Nov 20, 2024 03:24:33.779747009 CET	49775	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:33.780010939 CET	49775	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:33.780025005 CET	443	49775	23.1.237.91	192.168.2.5
Nov 20, 2024 03:24:33.783382893 CET	443	49703	23.1.237.91	192.168.2.5
Nov 20, 2024 03:24:33.783591986 CET	443	49703	23.1.237.91	192.168.2.5
Nov 20, 2024 03:24:33.815025091 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.815524101 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.815543890 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.816044092 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.816047907 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.824899912 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.825476885 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.825490952 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.825845003 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.825850964 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.869239092 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.869285107 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.869373083 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.869692087 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:33.869712114 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:33.874516964 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.880655050 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.880691051 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.882301092 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.882313013 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.882683039 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.882716894 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.882744074 CET	49754	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:33.882757902 CET	443	49754	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:33.884180069 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.884701014 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.884716034 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.885993958 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.886004925 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.919739008 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.919815063 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.919899940 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.926305056 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.926320076 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.926331043 CET	49768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.926336050 CET	443	49768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.929292917 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.929362059 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.929492950 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.929647923 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.929670095 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.929763079 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.930219889 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.930219889 CET	49769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.930233955 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.930243015 CET	443	49769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.931170940 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.931184053 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.932701111 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.932723999 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.932782888 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.932991982 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.933007002 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.937136889 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.937573910 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.937587023 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.938052893 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.938059092 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.981693029 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.981865883 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.981930971 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.982086897 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.982110023 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.982134104 CET	49772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.982147932 CET	443	49772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.984075069 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.984134912 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.984469891 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.984673977 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:33.984991074 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.984991074 CET	49773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.985009909 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.985019922 CET	443	49773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.987226009 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.987253904 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.987320900 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.989222050 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.989236116 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.990303040 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.990330935 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:33.990395069 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.990560055 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:33.990571976 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.007328987 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.007342100 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.007388115 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.007401943 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.007415056 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.007446051 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.029145956 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.029169083 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.029736042 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.030049086 CET	443	49762	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.030124903 CET	49762	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.032706022 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.032740116 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.032799006 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.033018112 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.033034086 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.041177034 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.041316986 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.041397095 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.041613102 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.041626930 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.041663885 CET	49771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.041671038 CET	443	49771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.043991089 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.044018984 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.044116974 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.044358015 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.044370890 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.044631958 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.044651985 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.044756889 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.044770002 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.044821978 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.213021040 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.213085890 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.213107109 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.213140011 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.213140965 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.213167906 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.213207960 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.213207960 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.214531898 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.214613914 CET	443	49761	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.214858055 CET	49761	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.224740028 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.224761963 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.224770069 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.224786043 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.224843025 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.224878073 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.224878073 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.224889994 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.224910975 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.224972010 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.250181913 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.250214100 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.250284910 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.250308990 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.250334024 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.250359058 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.284126043 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284188032 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284209013 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284226894 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284241915 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.284252882 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284269094 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284287930 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.284296989 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284332991 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.284338951 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.284362078 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.325978994 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.343519926 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.343576908 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.343596935 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.343635082 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.343672991 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.343708038 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.344587088 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.344719887 CET	443	49760	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.344815016 CET	49760	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.388473034 CET	443	49775	23.1.237.91	192.168.2.5
Nov 20, 2024 03:24:34.388667107 CET	49775	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:34.467001915 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.467015028 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.467063904 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.467133999 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.467133999 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.467149019 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.467735052 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.467782974 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.467925072 CET	443	49763	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.467933893 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.467984915 CET	49763	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.472206116 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.472233057 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.472328901 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.472548962 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.472559929 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.492136002 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.492151976 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.492196083 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.492213011 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.492245913 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.492259026 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.492290020 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.527883053 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.527915001 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.527960062 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.527960062 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.527997017 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.528008938 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.528022051 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.528032064 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.528043985 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.528131962 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.528137922 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.528629065 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.528703928 CET	443	49764	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.528964043 CET	49764	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.570266008 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.571043015 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.571058035 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.571604013 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.571608067 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.579193115 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.579577923 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.579596996 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.579978943 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.579982996 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.653053999 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.653522015 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.653537035 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.654715061 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.655164003 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.655181885 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.655630112 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.655635118 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.655642986 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.655647993 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.670412064 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.670492887 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.670654058 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.670696974 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.670706987 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.670717001 CET	49777	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.670722961 CET	443	49777	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.673188925 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.673219919 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.673408031 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.673577070 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.673590899 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.683722019 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.683803082 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.683871031 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.684000969 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.684000969 CET	49778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.684020042 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.684026957 CET	443	49778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.688810110 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.688906908 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.688987970 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.689122915 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.689162016 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.697809935 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.698301077 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.698309898 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.698652983 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.698657990 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.756412029 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.756468058 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.756683111 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.756762028 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.756762028 CET	49780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.756779909 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.756788969 CET	443	49780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.759485006 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.759509087 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.759584904 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.759733915 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.759744883 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.770600080 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.770682096 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.770775080 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.770807981 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.770821095 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.770831108 CET	49779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.770838022 CET	443	49779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.773191929 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.773215055 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.773291111 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.773421049 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.773436069 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.814248085 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:34.814536095 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:34.814549923 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:34.815543890 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:34.815774918 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:34.815989971 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.816013098 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:34.816135883 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.816143990 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:34.816211939 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.816220045 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:34.816410065 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.816410065 CET	49782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.816436052 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.816445112 CET	443	49782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.819092035 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.819128990 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.819206953 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.819451094 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:34.819466114 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:34.858514071 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:34.858525038 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:34.905368090 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:34.969645977 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.970031023 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.970047951 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.973689079 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.973769903 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.974123955 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.974296093 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.974307060 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.976161003 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.976174116 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.976219893 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.976228952 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.976248980 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:34.976277113 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:34.976296902 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.014674902 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.014684916 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.061543941 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.222512960 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.222552061 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.222608089 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.222621918 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.222769976 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.222779989 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.222826958 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.381659985 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.382102966 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.382141113 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.383747101 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.383752108 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.399982929 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.424403906 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.433295965 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.439589977 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:35.439795017 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.439811945 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:35.439819098 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.439867973 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:35.440589905 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.440596104 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.441476107 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.441489935 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.442378998 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.442384005 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.442584991 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.442603111 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.444041014 CET	49776	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:35.444056034 CET	443	49776	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:35.446477890 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.446563959 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.451297045 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.451491117 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.451503038 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.464617968 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.464633942 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.464682102 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.464799881 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.464799881 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.464828968 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.465886116 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.472495079 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.475152016 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.480999947 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.481009960 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.484170914 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.484263897 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.484999895 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.485007048 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.485038042 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.488812923 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.488831997 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.492681026 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.492687941 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.496458054 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.496483088 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.496495008 CET	49786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.496501923 CET	443	49786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.499335051 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.504214048 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.504236937 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.524215937 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.524239063 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.524357080 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.524507999 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.524521112 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.541193962 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.541255951 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.541321039 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.542447090 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.542526007 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.542577982 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.544593096 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.544615984 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.544627905 CET	49787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.544635057 CET	443	49787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.545984030 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.553253889 CET	49785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.553262949 CET	443	49785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.581629992 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.581785917 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.581903934 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.591897011 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.591931105 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.591972113 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.591998100 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.592006922 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.592047930 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.593588114 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.593755960 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.593816042 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.620826960 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.620848894 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.620863914 CET	49789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.620868921 CET	443	49789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.640006065 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.640031099 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.640043974 CET	49788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.640050888 CET	443	49788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.645129919 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.645145893 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.645262003 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.645318031 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.668160915 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.668209076 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.668312073 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.668564081 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.668589115 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.671175003 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.671228886 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.671289921 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.671443939 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:35.671456099 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:35.706412077 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.706424952 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.706476927 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.706500053 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.706511974 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.706573009 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.871611118 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.871690989 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.871714115 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.871736050 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.871762037 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.871781111 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.871803999 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.871818066 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.871839046 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.871840000 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.871859074 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.871891975 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.948643923 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.948679924 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.948729038 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.948728085 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.948793888 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:35.948808908 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:35.948849916 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.114114046 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.114145994 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.114195108 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.114204884 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.114243031 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.114253998 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.114286900 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.114866972 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.114949942 CET	443	49781	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.115035057 CET	49781	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.121611118 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.121692896 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.121788979 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.122000933 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.122026920 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.165662050 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.166169882 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.166182041 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.166644096 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.166649103 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.190300941 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.190336943 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.190382957 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.190435886 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.190435886 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.190464020 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.190481901 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.190507889 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.263922930 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.264086008 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.264138937 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.264489889 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.264508009 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.264520884 CET	49790	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.264525890 CET	443	49790	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.272131920 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.272159100 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.272237062 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.272398949 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.272412062 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.303514957 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.308120966 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308182955 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308219910 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308233023 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.308239937 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308269978 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308300018 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.308309078 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308336020 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308348894 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308371067 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.308383942 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.308394909 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.308394909 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.313251972 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.313271046 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.313956022 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.313961029 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.319849014 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.323306084 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.323355913 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.323769093 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.323782921 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.335338116 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.335774899 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.335805893 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.336210012 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.336221933 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.340940952 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.341620922 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.341648102 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.342068911 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.342077017 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.359225035 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.410375118 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.410470009 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.410532951 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.410741091 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.410759926 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.410772085 CET	49793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.410777092 CET	443	49793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.413619041 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.413638115 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.413858891 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.414037943 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.414057016 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.425309896 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.425373077 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.425537109 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.425774097 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.425774097 CET	49792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.425813913 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.425838947 CET	443	49792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.428805113 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.428833961 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.428899050 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.429024935 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.429040909 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.431938887 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.431952953 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.432013035 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.432034969 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.432044983 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.432084084 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.432100058 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.438451052 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.438523054 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.438625097 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.438688040 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.438688040 CET	49794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.438720942 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.438749075 CET	443	49794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.441210985 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.441245079 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.441322088 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.441551924 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.441570044 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.444946051 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.445008993 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.445094109 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.445199013 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.445211887 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.445226908 CET	49791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.445230961 CET	443	49791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.447510958 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.447546005 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.447606087 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.447861910 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.447882891 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.549863100 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.549880981 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.549904108 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.549921036 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.549925089 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.549931049 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.549947977 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.549983025 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.550559998 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.550604105 CET	443	49784	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.550723076 CET	49784	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.673779964 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.673794031 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.673845053 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.673865080 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.673882008 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.673917055 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.673933983 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.674464941 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.674535990 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.681209087 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.681265116 CET	443	49748	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:36.681327105 CET	49748	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:36.952461004 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.954236984 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.954263926 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:36.954969883 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:36.954977036 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.059559107 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.060197115 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.060237885 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.060647964 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.060653925 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.066369057 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.066764116 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.066790104 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.067162991 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.067169905 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.069571018 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.069740057 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.069811106 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.069847107 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.069864035 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.069875002 CET	49796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.069880009 CET	443	49796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.072097063 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.072427988 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.072448015 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.072487116 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.072521925 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.072594881 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.072746992 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.072761059 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.076124907 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.076209068 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.076618910 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.076793909 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.076802969 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.080296040 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.080916882 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.080934048 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.081301928 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.081306934 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.113672018 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.114054918 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.114073038 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.114473104 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.114480019 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.119352102 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.123850107 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.123903990 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.163364887 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.163546085 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.163651943 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.163741112 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.163758039 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.163786888 CET	49797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.163793087 CET	443	49797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.165379047 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.165451050 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.165570974 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.165713072 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.165730000 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.165740967 CET	49798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.165745974 CET	443	49798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.166796923 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.166834116 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.167103052 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.167151928 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.167157888 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.167809010 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.167846918 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.168081999 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.168188095 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.168206930 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.170370102 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.181873083 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.181952000 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.182012081 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.182061911 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.182071924 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.182081938 CET	49799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.182085991 CET	443	49799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.184401035 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.184426069 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.184581041 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.184745073 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.184755087 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.217113018 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.217200994 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.217278957 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.217415094 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.217430115 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.217468023 CET	49800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.217474937 CET	443	49800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.220345020 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.220422029 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.220658064 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.220824003 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.220850945 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.736972094 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.741538048 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.741554976 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.743484974 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.743489027 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.813186884 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.829319000 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.830771923 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.830789089 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.831403017 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.831408978 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.833118916 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.833142042 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.833623886 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.833630085 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.844620943 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.844779015 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.844851017 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.845238924 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.845251083 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.845259905 CET	49801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.845263958 CET	443	49801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.845868111 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.846595049 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.846622944 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.847208977 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.847214937 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.848920107 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.848952055 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.849210024 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.849340916 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.849351883 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.870462894 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.871099949 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.871141911 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.871915102 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.871931076 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.931618929 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.931811094 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.931883097 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.932028055 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.932045937 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.932055950 CET	49803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.932065010 CET	443	49803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.937613964 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.937685013 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.943429947 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.951551914 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.951580048 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.951590061 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.951606035 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.951618910 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.951627970 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.951663971 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.951678991 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:37.951711893 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.951735973 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:37.971261024 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.971337080 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.971453905 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.993350029 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.993366957 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.993403912 CET	49805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.993408918 CET	443	49805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.994427919 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.994443893 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:37.994455099 CET	49804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:37.994461060 CET	443	49804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.020792007 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.020817995 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.021076918 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.022016048 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.022041082 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.022205114 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.023858070 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.023871899 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.024231911 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.024250031 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.024832964 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.024868965 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.025193930 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.025193930 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.025222063 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.059190989 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.059254885 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.059458017 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.180880070 CET	49802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.180907011 CET	443	49802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.192902088 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.192939043 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.193077087 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.193329096 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.193346977 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.281488895 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:38.281523943 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:38.281574011 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:38.281584978 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:38.281636953 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:38.281646013 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:38.281915903 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:38.281991959 CET	443	49795	124.43.162.133	192.168.2.5
Nov 20, 2024 03:24:38.282042027 CET	49795	443	192.168.2.5	124.43.162.133
Nov 20, 2024 03:24:38.502018929 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.502542973 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.502563953 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.503034115 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.503040075 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.603521109 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.603626013 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.603715897 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.603837967 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.603859901 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.603873968 CET	49806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.603893042 CET	443	49806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.607491016 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.607536077 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.607680082 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.607893944 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.607908010 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.657728910 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.658291101 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.658335924 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.658751965 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.658757925 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.663055897 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.663474083 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.663495064 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.663984060 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.663989067 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.673595905 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.673952103 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.673979998 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.674443960 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.674453020 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.758919954 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.758991003 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.759053946 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.759228945 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.759258032 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.759268999 CET	49807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.759274960 CET	443	49807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.762190104 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.762216091 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.762280941 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.762423038 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.762429953 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.762459993 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.762521982 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.762587070 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.762654066 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.762679100 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.762690067 CET	49809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.762695074 CET	443	49809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.766582966 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.766621113 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.766705990 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.767103910 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.767121077 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.798394918 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.798568964 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.798635006 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.803122044 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.803139925 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.803149939 CET	49808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.803153992 CET	443	49808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.808690071 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.808707952 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.808804035 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.809189081 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.809201956 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.846266985 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.846954107 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.846977949 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.847418070 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.847421885 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.948523998 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.948609114 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.948668957 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.948879957 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.948894024 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.948904991 CET	49810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.948909998 CET	443	49810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.954010010 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.954042912 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:38.954128027 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.954427958 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:38.954442978 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.275681019 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.276479006 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.276498079 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.277168036 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.277173042 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.385994911 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.386126041 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.386240959 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.386389971 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.386421919 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.386435032 CET	49811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.386440992 CET	443	49811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.389776945 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.389904976 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.390019894 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.390192986 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.390228987 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.413039923 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.413710117 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.413733006 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.414491892 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.414499044 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.436243057 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.436779022 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.436816931 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.437479973 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.437490940 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.461112022 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.461713076 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.461751938 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.462541103 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.462548971 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.516375065 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.516540051 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.516726017 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.516769886 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.516789913 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.516802073 CET	49813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.516812086 CET	443	49813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.519680977 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.519722939 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.519809961 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.520019054 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.520049095 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.542015076 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.542074919 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.542143106 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.542241096 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.542258978 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.542273045 CET	49812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.542279959 CET	443	49812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.544730902 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.544780016 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.544884920 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.545026064 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.545044899 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.583812952 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.583884001 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.583942890 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.584147930 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.584161043 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.584187031 CET	49814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.584192038 CET	443	49814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.587044001 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.587093115 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.587172031 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.587382078 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.587395906 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.591175079 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.591610909 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.591624022 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.592057943 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.592066050 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.693598986 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.693665028 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.693751097 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.693983078 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.693983078 CET	49815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.694005966 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.694019079 CET	443	49815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.696862936 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.696911097 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:39.697190046 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.697376966 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:39.697391987 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.033087969 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.033667088 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.033691883 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.034322977 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.034328938 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.135618925 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.135900974 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.136076927 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.136142015 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.136142015 CET	49816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.136167049 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.136179924 CET	443	49816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.139468908 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.139514923 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.139585018 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.139774084 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.139801025 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.181737900 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.182395935 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.182467937 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.182979107 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.182992935 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.203775883 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.204340935 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.204365015 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.204797029 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.204802990 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.269409895 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.270136118 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.270167112 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.270905018 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.270915985 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.292962074 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.293047905 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.293253899 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.293431997 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.293473959 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.293518066 CET	49817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.293535948 CET	443	49817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.298754930 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.298801899 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.298926115 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.299098015 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.299110889 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.309315920 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.309372902 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.309459925 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.309864998 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.309895992 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.309911966 CET	49818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.309921026 CET	443	49818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.315179110 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.315220118 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.315327883 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.315510035 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.315527916 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.363220930 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.363802910 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.363831043 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.364376068 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.364382029 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.381880999 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.381954908 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.382113934 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.382800102 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.382801056 CET	49819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.382855892 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.382883072 CET	443	49819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.387880087 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.387931108 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.388041019 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.388379097 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.388389111 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.475543976 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.475754976 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.475824118 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.475917101 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.475934982 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.475948095 CET	49820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.475953102 CET	443	49820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.479058027 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.479099989 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.479335070 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.479597092 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.479613066 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.782800913 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.789968014 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.790000916 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.794506073 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.794511080 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.908643007 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.908700943 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.908757925 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.908773899 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.909476995 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.909539938 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.909854889 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.909869909 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.909893990 CET	49821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.909898996 CET	443	49821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.922816992 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.922852993 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.922925949 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.926966906 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.926980972 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.942272902 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.944300890 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.944324970 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.945036888 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.945044041 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.954339981 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.960027933 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.960047007 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:40.960572958 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:40.960577011 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.048710108 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.048793077 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.048854113 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.049086094 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.049104929 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.049115896 CET	49822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.049122095 CET	443	49822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.052412987 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.052467108 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.052531004 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.052746058 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.052769899 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.063500881 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.064069986 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.064099073 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.064699888 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.064706087 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.088921070 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.089009047 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.089080095 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.089206934 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.089206934 CET	49823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.089221954 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.089231014 CET	443	49823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.092022896 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.092048883 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.092111111 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.092344046 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.092361927 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.127468109 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.130156040 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.130179882 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.130812883 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.130827904 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.187346935 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.187371969 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.187438965 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.187470913 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.187496901 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.188111067 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.188129902 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.188209057 CET	49824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.188215017 CET	443	49824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.191410065 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.191447020 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.191530943 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.191683054 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.191698074 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.228684902 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.228708982 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.228792906 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.228809118 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.228885889 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.228985071 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.228985071 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.228992939 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.229150057 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.229182959 CET	443	49825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.229218006 CET	49825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.231729984 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.231780052 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.231847048 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.232028008 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.232043028 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.580564022 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.581356049 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.581372023 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.581815004 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.581824064 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.683212996 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.683250904 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.683295965 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.683309078 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.683574915 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.683582067 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.683624029 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.683757067 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.683800936 CET	443	49826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.683840990 CET	49826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.688642025 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.688680887 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.688751936 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.688946009 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.688961029 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.691710949 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.692111969 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.692142963 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.692784071 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.692795038 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.727999926 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.728511095 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.728519917 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.728981018 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.728986025 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.795648098 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.796677113 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.797029018 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.802298069 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.802298069 CET	49827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.802330017 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.802340984 CET	443	49827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.806915045 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.806991100 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.807065010 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.807224035 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.807254076 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.827054977 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.827507019 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.827528954 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.827956915 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.827965975 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.831357002 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.831444979 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.831496954 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.831640959 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.831645012 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.831659079 CET	49828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.831662893 CET	443	49828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.834855080 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.834883928 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.834934950 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.835124016 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.835134983 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.874166012 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.875587940 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.875601053 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.876190901 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.876195908 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.911674976 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:41.911725998 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:41.912554026 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:41.912823915 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:41.912854910 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:41.928543091 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.929558992 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.929675102 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.929675102 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.929811954 CET	49829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.929833889 CET	443	49829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.932471037 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.932503939 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.932673931 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.932792902 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.932801962 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.977448940 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.977513075 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.977724075 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.977724075 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.977761984 CET	49830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.977772951 CET	443	49830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.980493069 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.980508089 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:41.980664015 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.980789900 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:41.980801105 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.365364075 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.366146088 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.366164923 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.366676092 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.366682053 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.446377993 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.446837902 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.446868896 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.447665930 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.447670937 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.469947100 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.470438957 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.470470905 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.470973015 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.470978022 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.473025084 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.473414898 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.473509073 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.473568916 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.473568916 CET	49831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.473584890 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.473601103 CET	443	49831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.476694107 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.476720095 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.476897955 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.476986885 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.476996899 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.545867920 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.546468019 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.547095060 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.547147989 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.547147989 CET	49832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.547162056 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.547173023 CET	443	49832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.550453901 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.550462961 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.550590038 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.551668882 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.551683903 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.568728924 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.569343090 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.570166111 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.570219040 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.570219040 CET	49833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.570234060 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.570242882 CET	443	49833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.573951960 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.573981047 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.573999882 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.574098110 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.574646950 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.574656963 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.575122118 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.575123072 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.575126886 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.575131893 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.641182899 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.641849041 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.641861916 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.642471075 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.642476082 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.676224947 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.676287889 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.679760933 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.679760933 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.679805040 CET	49835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.679821968 CET	443	49835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.682518959 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.682550907 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.682717085 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.682925940 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.682935953 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.743848085 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.744139910 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.745393038 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.745393038 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.745454073 CET	49836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.745460033 CET	443	49836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.748404980 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.748444080 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.748574018 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.748734951 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:42.748748064 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:42.874902964 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:42.875320911 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:42.875336885 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:42.875806093 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:42.876377106 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:42.876377106 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:42.876447916 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:42.924436092 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:43.120232105 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.121073961 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.121098995 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.121793985 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.121798992 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.218108892 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.218569994 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.218580961 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.219178915 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.219182968 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.219845057 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.220426083 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.220453978 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.221062899 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.221067905 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.226615906 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.227157116 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.227211952 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.227329969 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.227344036 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.227354050 CET	49837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.227360010 CET	443	49837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.231877089 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.231914997 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.232034922 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.233055115 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.233059883 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.321724892 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.324237108 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.324314117 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.324381113 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.330730915 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.330888033 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.330956936 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.330977917 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.331016064 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.349767923 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.349843979 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.350233078 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.350245953 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.351432085 CET	49839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.351468086 CET	443	49839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.353523016 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.353537083 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.353545904 CET	49838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.353554010 CET	443	49838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.406152010 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.448116064 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.477267981 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.477278948 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.479331970 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.479840994 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.479891062 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.479948997 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.481249094 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.481259108 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.511853933 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:43.511959076 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:43.512018919 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:43.540179968 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.540186882 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.540201902 CET	49840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.540205956 CET	443	49840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.543432951 CET	49834	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:43.543448925 CET	443	49834	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:43.559386015 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:43.559432030 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:43.559509039 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:43.580401897 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.580719948 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.580789089 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.600092888 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:43.600116968 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:43.602087975 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.602128029 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.602190018 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.602452993 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.602468014 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.602482080 CET	49841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.602488041 CET	443	49841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.603494883 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.603519917 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.603605032 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.603919983 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.603931904 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.603992939 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.604388952 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.604398966 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.604542971 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.604552031 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.604960918 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.604969978 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.606152058 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.606163025 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.606221914 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.606616974 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.606621981 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.878463030 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.880589962 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.880624056 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.881246090 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.881252050 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.977273941 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.977628946 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.977716923 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.977766037 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.977766037 CET	49842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.977783918 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.977788925 CET	443	49842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.980901957 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.980915070 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:43.981049061 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.981465101 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:43.981475115 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.243089914 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.243635893 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.243649006 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.244091034 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.244095087 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.250922918 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.251306057 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.251327991 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.251712084 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.251715899 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.272553921 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.273009062 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.273045063 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.273391962 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.273397923 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.281238079 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.281745911 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.281774044 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.282174110 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.282179117 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.343832016 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.343949080 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.344084978 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.344161034 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.344182968 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.344194889 CET	49847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.344201088 CET	443	49847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.346999884 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.347033024 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.347112894 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.347285032 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.347295046 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.354855061 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.354943991 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.355101109 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.355146885 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.355148077 CET	49846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.355159998 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.355170012 CET	443	49846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.357865095 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.357897043 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.357965946 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.358167887 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.358184099 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.381160021 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.381449938 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.381499052 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.381501913 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.381550074 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.381597996 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.381604910 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.381614923 CET	49845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.381618977 CET	443	49845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.383841038 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.383891106 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.383960009 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.384082079 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.384097099 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.388638020 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.389019012 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.389069080 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.389096975 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.389106035 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.389112949 CET	49844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.389117002 CET	443	49844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.391141891 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.391163111 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.391232014 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.391386986 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.391397953 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.532542944 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:44.533924103 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:44.533960104 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:44.534344912 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:44.538261890 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:44.538347960 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:44.538424015 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:44.579333067 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:44.650161982 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.650871038 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.650891066 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.651498079 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.651504993 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.753582001 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.753700972 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.753889084 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.753937960 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.753947973 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.753959894 CET	49848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.753963947 CET	443	49848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.757105112 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.757204056 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.757318974 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.757478952 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.757510900 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.932617903 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.933120012 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.933146000 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:44.933604002 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:44.933610916 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.014101028 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.014765978 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.014794111 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.015233040 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.015240908 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.032016039 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.032622099 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.032643080 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.033179998 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.033186913 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.035765886 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.036098003 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.036145926 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.036195993 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.036216974 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.036230087 CET	49850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.036236048 CET	443	49850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.038896084 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.038933992 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.038959026 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.039060116 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.039213896 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.039225101 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.039324045 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.039343119 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.039767027 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.039772987 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.117569923 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.117769003 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.117825031 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.117846012 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.117897987 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.117942095 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.117984056 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.118005991 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.118015051 CET	49849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.118021011 CET	443	49849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.120963097 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.121025085 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.121128082 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.121290922 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.121315002 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.131395102 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.131464005 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.131530046 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.131531000 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.131572962 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.131783009 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.131802082 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.131813049 CET	49851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.131819010 CET	443	49851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.134285927 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.134327888 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.134423018 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.134603977 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.134615898 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.162606001 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.162760019 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.162864923 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.162950993 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.162967920 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.163019896 CET	49852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.163034916 CET	443	49852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.165435076 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.165473938 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.165555954 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.165747881 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.165762901 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.485522985 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.486488104 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.486512899 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.486999035 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.487003088 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.585902929 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.586246014 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.586338997 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.586546898 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.586546898 CET	49853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.586558104 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.586568117 CET	443	49853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.589193106 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.589207888 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.589304924 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.589474916 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.589485884 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.724714994 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.725231886 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.725276947 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.726006031 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.726010084 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.793771982 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.793998003 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.794336081 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.794374943 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.795459032 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.795464993 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.795834064 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.795849085 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.796262026 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.796267033 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.816926956 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.817456961 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.817476034 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.817967892 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.817972898 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.892781019 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.893026114 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.893124104 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.895703077 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.895998955 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.896050930 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.896051884 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.896102905 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.901949883 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.901967049 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.901977062 CET	49856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.901982069 CET	443	49856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.902864933 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.902869940 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.902880907 CET	49855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.902884007 CET	443	49855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.905973911 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.906014919 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.906038046 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.906064034 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.906085014 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.906114101 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.906227112 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.906238079 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.906260967 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.906267881 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.931957006 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.932189941 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.932282925 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:45.954164028 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.954457998 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:45.954545021 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.024843931 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.024918079 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.024954081 CET	49857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.024961948 CET	443	49857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.041295052 CET	49854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.041305065 CET	443	49854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.117124081 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.117167950 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.117289066 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.117825985 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.117842913 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.118563890 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.118601084 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.118654013 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.118776083 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.118784904 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.225613117 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.226180077 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.226234913 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.226742983 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.226759911 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.330710888 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.331515074 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.331600904 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.332191944 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.332192898 CET	49858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.332228899 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.332284927 CET	443	49858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.335283995 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.335342884 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.335438013 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.335654020 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.335666895 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.382899046 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.383034945 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.383105993 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.384164095 CET	49843	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.384196997 CET	443	49843	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.416271925 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.416311979 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.416384935 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.416599035 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.416635036 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.416686058 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.417805910 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.417819023 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.418062925 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.418080091 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.426701069 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.426717997 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.426831961 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.427090883 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:46.427105904 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:46.490732908 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.491219997 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.491245031 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.491765976 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.491780043 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.547785997 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.548333883 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.548357010 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.548912048 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.548917055 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.596618891 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.596842051 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.596885920 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.596957922 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.596957922 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.597352982 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.597378016 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.597578049 CET	49859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.597585917 CET	443	49859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.603333950 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.603363037 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.603585005 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.603585005 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.603612900 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.647687912 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.648040056 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.648170948 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.678745031 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.678745031 CET	49860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.678765059 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.678777933 CET	443	49860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.682250023 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.682281971 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.682334900 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.682576895 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.682585955 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.764122009 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.764791965 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.764805079 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.765290976 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.765309095 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.782085896 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.783122063 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.783134937 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.783390045 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.783396006 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.870909929 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.870970964 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.871216059 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.871323109 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.871323109 CET	49862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.871335983 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.871344090 CET	443	49862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.874675989 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.874722958 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.874792099 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.874943972 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.874959946 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.887407064 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.887870073 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.887942076 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.888001919 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.888015985 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.888046980 CET	49861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.888053894 CET	443	49861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.891026974 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.891069889 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.891153097 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.891283989 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.891294956 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.975388050 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.976182938 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.976198912 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:46.976427078 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:46.976432085 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.076545954 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.076719046 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.076781988 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.076785088 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.076956987 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.076956987 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.077018023 CET	49863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.077039003 CET	443	49863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.079626083 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.079674006 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.079747915 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.079886913 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.079905033 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.194994926 CET	50734	53	192.168.2.5	162.159.36.2
Nov 20, 2024 03:24:47.199785948 CET	53	50734	162.159.36.2	192.168.2.5
Nov 20, 2024 03:24:47.199868917 CET	50734	53	192.168.2.5	162.159.36.2
Nov 20, 2024 03:24:47.204879999 CET	53	50734	162.159.36.2	192.168.2.5
Nov 20, 2024 03:24:47.237648010 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.238277912 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.238292933 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.238789082 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.238792896 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.337724924 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.338089943 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.338144064 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.338176966 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.338191986 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.338202953 CET	49867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.338208914 CET	443	49867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.341703892 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.341738939 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.341983080 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.343018055 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.343035936 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.346400976 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.346824884 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.346859932 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.347420931 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.347425938 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.354820967 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.355058908 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.355067968 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.356228113 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.356291056 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.356798887 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.356873989 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.356956005 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.356961012 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.366234064 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.366508961 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.366522074 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.366883993 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.367259979 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.367337942 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.367388010 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.370656013 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.370908976 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.370932102 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.372088909 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.372140884 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.372579098 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.372647047 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.404283047 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.415328026 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.419840097 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.419851065 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.453469992 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.454032898 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.454109907 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.454216957 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.454235077 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.454248905 CET	49868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.454253912 CET	443	49868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.457426071 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.457465887 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.457526922 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.457730055 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.457746029 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.469080925 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.508680105 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.509162903 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.509190083 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.509612083 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.509618044 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.553261042 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.553738117 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.553759098 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.554337978 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.554342031 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.608469963 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.608530045 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.608587027 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.608881950 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.608897924 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.608911037 CET	49869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.608916998 CET	443	49869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.613498926 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.613526106 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.613583088 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.613955021 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.613964081 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.653645992 CET	50734	53	192.168.2.5	162.159.36.2
Nov 20, 2024 03:24:47.656884909 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.657361984 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.657418013 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.657418966 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.657486916 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.658601999 CET	53	50734	162.159.36.2	192.168.2.5
Nov 20, 2024 03:24:47.658646107 CET	50734	53	192.168.2.5	162.159.36.2
Nov 20, 2024 03:24:47.659266949 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.659276962 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.659287930 CET	49870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.659292936 CET	443	49870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.668646097 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.668677092 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.668752909 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.668878078 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.668889999 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.683120012 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:47.683136940 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:47.683197975 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:47.683566093 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:47.683574915 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:47.755081892 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.755711079 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.755728960 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.756208897 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.756217957 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.859642982 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.859998941 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.860057116 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.860090017 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.860105991 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.860119104 CET	49871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.860124111 CET	443	49871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.863061905 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.863100052 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.863173008 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.863348961 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.863358974 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.994848013 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.994950056 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.995703936 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.996109962 CET	49866	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:47.996119976 CET	443	49866	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:47.996989965 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.997529030 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.997566938 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:47.998111010 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:47.998119116 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.106050014 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.106650114 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.106671095 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.107218981 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.107223034 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.129592896 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.129986048 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.130047083 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.130064011 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.130089998 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.130177021 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.130192041 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.130204916 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.130204916 CET	50735	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.130212069 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.130218983 CET	443	50735	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.133066893 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.133086920 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.133166075 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.133337021 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.133347034 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.208390951 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.209054947 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.209119081 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.209152937 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.209165096 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.209180117 CET	50736	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.209184885 CET	443	50736	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.211961031 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.211977959 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.212071896 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.212205887 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.212218046 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.251714945 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.254307985 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.254322052 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.255671024 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.255675077 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.264240026 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.264276981 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.264283895 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.264293909 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.264313936 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.264348984 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.264359951 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.264400005 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.265914917 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.265932083 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.265980959 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.265986919 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.266006947 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.303860903 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.311862946 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.340668917 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.340687037 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.345710039 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.345716000 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.346097946 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.346160889 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:48.351279020 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.351605892 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.351638079 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.351649046 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.351711035 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.403120041 CET	50737	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.403127909 CET	443	50737	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.415719986 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:48.415733099 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.417032957 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.442347050 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.442619085 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.442724943 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.472018957 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:48.506323099 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.506335974 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.506367922 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.506443024 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.506467104 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.506494045 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.506513119 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.507113934 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.507131100 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.507172108 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.507179022 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.507328033 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.507704020 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.507719994 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.507730007 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.507764101 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.507781029 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.507812977 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.507828951 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.508687019 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.508702040 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.508761883 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.508771896 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.508802891 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.508819103 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.525970936 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.525994062 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.526273012 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.526285887 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.536257982 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.536287069 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.536298037 CET	50738	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.536304951 CET	443	50738	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.542505026 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:48.583348989 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.622874022 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.622968912 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.623066902 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.623086929 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.623106956 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.626033068 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.673511028 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.673645020 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.673722982 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:48.801126003 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.801143885 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.801157951 CET	50740	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.801163912 CET	443	50740	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.804321051 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:48.804330111 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.804354906 CET	50739	443	192.168.2.5	52.165.164.15
Nov 20, 2024 03:24:48.804358959 CET	443	50739	52.165.164.15	192.168.2.5
Nov 20, 2024 03:24:48.811172962 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.829715967 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.829752922 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.830025911 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.831032038 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.831044912 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.831521988 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.831526041 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.837105989 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.837141037 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.837201118 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.837582111 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.837594986 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.839405060 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.839438915 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.839504957 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.840009928 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.840022087 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.840743065 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.840755939 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.864458084 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.865494967 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.865520000 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.866503000 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.866508961 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.867461920 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:48.911345005 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:48.932080030 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.932153940 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.932205915 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.950242043 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.950258970 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.950269938 CET	50741	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.950274944 CET	443	50741	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.956629992 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.956670046 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.956727028 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.957464933 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:48.957474947 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:48.975995064 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:48.976031065 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:48.976085901 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:48.976727962 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:48.976742029 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:49.159379959 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.159410000 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159418106 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.159425020 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159466982 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.159487963 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159548044 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.159584999 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159605980 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159605980 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.159605980 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.159626007 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.159634113 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159651041 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159652948 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.159673929 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159701109 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.159709930 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.159734964 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.159755945 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.159828901 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.159830093 CET	50742	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.159851074 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.159862995 CET	443	50742	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.163614988 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.163666964 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.163758039 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.163975000 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.163986921 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.206841946 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.206954002 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.207027912 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.207998991 CET	49865	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.208026886 CET	443	49865	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.231905937 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.231935024 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.232072115 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.232100964 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.232142925 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.232606888 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.232624054 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.232656956 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.232662916 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.232686043 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.232702017 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.233234882 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.233253002 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.233294010 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.233299971 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.233458996 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.233458996 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.397761106 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.397865057 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.397952080 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.398204088 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.398240089 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.474020004 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.474049091 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.474109888 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.474128962 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.474167109 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.474617004 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.474632978 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.474659920 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.474667072 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.474689960 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.474704981 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.495426893 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.496252060 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.496279001 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.496959925 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.496965885 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.503194094 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.503578901 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.503612041 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.503978014 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.503988028 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.503995895 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.504292965 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.504314899 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.504801035 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.504806042 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.600320101 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.600585938 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.600670099 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.600800037 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.600817919 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.600856066 CET	50743	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.600862980 CET	443	50743	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.603815079 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.603910923 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.604011059 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.604190111 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.604224920 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.606118917 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.606287003 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.606353045 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.606394053 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.606415033 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.606426954 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.606437922 CET	50745	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.606441975 CET	443	50745	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.607058048 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.607112885 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.607671022 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.607671022 CET	50744	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.607681990 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.607690096 CET	443	50744	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.609852076 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.609880924 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.609970093 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.610732079 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.610749960 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.610824108 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.610862017 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.610886097 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.610956907 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.610976934 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.715533972 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.715559959 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.715694904 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.715707064 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.715754986 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.715977907 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.715992928 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.716049910 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.716057062 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.716090918 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.716722012 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.716737032 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.716782093 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.716789007 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.716814995 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.716835976 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.791299105 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.792004108 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.792032957 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.792486906 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.792493105 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.811984062 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.812653065 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.812742949 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.813061953 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.813077927 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.893481970 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.893517017 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.893584013 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.893620968 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.893660069 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.893898964 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.893920898 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.893933058 CET	50746	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.893938065 CET	443	50746	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.897026062 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.897130966 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.897234917 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.897416115 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.897452116 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.914033890 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.915086031 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.915159941 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.915208101 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.915208101 CET	50748	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.915232897 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.915256977 CET	443	50748	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.917654037 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.917706966 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.917778015 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.917901993 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:49.917920113 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:49.934539080 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:49.934622049 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:49.935965061 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:49.935986996 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:49.936238050 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:49.937242985 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:49.958355904 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.958380938 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.958456993 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.958486080 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.958503008 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.958560944 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.958884954 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.958903074 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.958930969 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.958940029 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:49.958966017 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:49.983330965 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:50.008441925 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.183526039 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:50.183615923 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:50.183677912 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:50.183723927 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:50.183738947 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:50.183749914 CET	50747	443	192.168.2.5	4.175.87.197
Nov 20, 2024 03:24:50.183754921 CET	443	50747	4.175.87.197	192.168.2.5
Nov 20, 2024 03:24:50.201283932 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201308012 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201375008 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.201409101 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201432943 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201448917 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.201455116 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201483011 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.201488972 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201514959 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201514959 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.201531887 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201560974 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.201567888 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.201595068 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.201621056 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.259881020 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.260442972 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.260478973 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.260926008 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.260937929 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.281451941 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.281964064 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.281991005 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.282404900 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.282418013 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.282453060 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.282706022 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.282716990 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.283056021 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.283061028 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.330168009 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.330449104 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.330476046 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.330821991 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.331141949 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.331224918 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.331276894 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.361195087 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.361527920 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.361579895 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.361618042 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.361637115 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.361654043 CET	50752	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.361659050 CET	443	50752	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.364762068 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.364823103 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.364898920 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.365072966 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.365102053 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.371326923 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.387355089 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.387552977 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.387602091 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.387636900 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.387649059 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.387670040 CET	50751	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.387675047 CET	443	50751	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.392103910 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.392131090 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.392194986 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.392388105 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.392398119 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.395116091 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.395379066 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.395437002 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.395461082 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.395517111 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.395548105 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.395598888 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.395641088 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.395641088 CET	50750	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.395658970 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.395680904 CET	443	50750	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.399198055 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.399231911 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.399293900 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.399507999 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.399523973 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.441349030 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.441373110 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.441427946 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.441453934 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.441471100 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.441490889 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.441838026 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.441854000 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.441894054 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.441906929 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.441929102 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.441943884 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.442656994 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.442673922 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.442743063 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.442751884 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.442785978 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.537175894 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.537820101 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.537868977 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.538356066 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.538367033 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.595370054 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.595829964 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.595849991 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.596338034 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.596349955 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.651021004 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.651467085 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.651526928 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.651563883 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.651592016 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.651626110 CET	50753	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.651642084 CET	443	50753	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.654505014 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.654545069 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.654608011 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.654772043 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.654786110 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.683130980 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.683141947 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.683193922 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.683204889 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.683257103 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.683263063 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.683289051 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.683331966 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.683770895 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.683788061 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.683831930 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.683836937 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.683866978 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.684092045 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.684458017 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.684474945 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.684530973 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.684540033 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.684603930 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.700824022 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.700970888 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.701014042 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.701040030 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.701081038 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.701122999 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.703363895 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.703388929 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.703408003 CET	50754	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.703413963 CET	443	50754	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.706186056 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.706213951 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.706281900 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.706434011 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:50.706446886 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:50.925004959 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925017118 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925052881 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925077915 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.925098896 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925127029 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.925147057 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.925312042 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925328016 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925369978 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.925378084 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925396919 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.925415993 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.925873041 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925889015 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.925935984 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.925942898 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.926146984 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.926578999 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.926594973 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.926660061 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:50.926666975 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:50.927016020 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.038877010 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.039408922 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.039427042 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.039915085 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.039918900 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.043308020 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.043457031 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.043742895 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.043756008 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.044035912 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.044111967 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.044198036 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.044203997 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.044614077 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.044625998 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.137072086 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.137649059 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.137712955 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.137774944 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.137810946 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.142678976 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.142846107 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.142868996 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.142895937 CET	50756	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.142903090 CET	443	50756	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.142914057 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.142961025 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.160960913 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.160972118 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.160983086 CET	50757	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.160996914 CET	443	50757	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.163098097 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.163686991 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.163785934 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.166980028 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.166992903 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.167020082 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.167048931 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.167062998 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.167092085 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.167119980 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.168327093 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.168370962 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.168390989 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.168397903 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.168418884 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.168438911 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.168489933 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.168510914 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.168523073 CET	50755	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.168529987 CET	443	50755	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.169543028 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.169560909 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.169637918 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.169644117 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.169678926 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.196069956 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.196089983 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.196105003 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.196186066 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.196213961 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.196264029 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.197837114 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.197854042 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.197911978 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.197928905 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.251055956 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.298398018 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.338557005 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.361449957 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.361470938 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.361939907 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.361944914 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.365664005 CET	50760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.365700006 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.366213083 CET	50760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.366434097 CET	50760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.366442919 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.369705915 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.369738102 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.369843006 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.377338886 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.377361059 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.377630949 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.378782034 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.378796101 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.380795956 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.380805016 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.383428097 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.383814096 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.383831024 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.384246111 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.384249926 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.408590078 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.408601046 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.408628941 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.408673048 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.408683062 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.408727884 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.409132957 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.409149885 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.409194946 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.409199953 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.409226894 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.409241915 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.410542965 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.410571098 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.410598993 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.410604954 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.410644054 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.411468029 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.411483049 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.411530972 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.411535978 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.411571980 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.437853098 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.437876940 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.437972069 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.437998056 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.438036919 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.439949036 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.439965010 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.440028906 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.440047026 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.440072060 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.440087080 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.440870047 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.440886021 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.440931082 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.440942049 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.440973997 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.458332062 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.458682060 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.458831072 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.475040913 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:51.475064039 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:51.475169897 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:51.475250959 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.475265980 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.475296974 CET	50758	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.475301981 CET	443	50758	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.475636005 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:51.475650072 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:51.478482008 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.478509903 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.478682995 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.478900909 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.478910923 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.485405922 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.485928059 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.485982895 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.486035109 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.486049891 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.486063957 CET	50759	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.486068964 CET	443	50759	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.488645077 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.488678932 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.488764048 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.488893032 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:51.488905907 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:51.650425911 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.650439024 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.650481939 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.650506973 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.650523901 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.650548935 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.650573015 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.651686907 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.651731968 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.651752949 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.651757956 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.651797056 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.653047085 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.653064966 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.653137922 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.653143883 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.653199911 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.653331041 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.653384924 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.653390884 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.653409958 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.653445959 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.655029058 CET	49864	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.655038118 CET	443	49864	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.680573940 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.680598021 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.680681944 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.680711031 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.680759907 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.681327105 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.681344986 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.681391954 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.681404114 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.681463003 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.681907892 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.681922913 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.681982040 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.681991100 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.682024002 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.682965040 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.682980061 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.683041096 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.683052063 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.683123112 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.921720982 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.921757936 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.921797991 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.921813965 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.921863079 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.922172070 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.922188044 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.922243118 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.922250032 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.922283888 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.922764063 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.922777891 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.922810078 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.922816992 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.922844887 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.922863007 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.923367977 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.923382998 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.923437119 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.923446894 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.923480034 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.926752090 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.926769018 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.926815033 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.926821947 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.926837921 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.926866055 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.926903009 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.928002119 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.928019047 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.928080082 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.928083897 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.928095102 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.928112984 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.928123951 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.928158998 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:51.928168058 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:51.982546091 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.016654015 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.017162085 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.017184973 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.017787933 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.017792940 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.030608892 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.031085014 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.031109095 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.031183004 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.032146931 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.032151937 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.032445908 CET	50760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.032445908 CET	50760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.032463074 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.032479048 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.115458965 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.115653992 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.115726948 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.115830898 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.115830898 CET	50762	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.115852118 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.115856886 CET	443	50762	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.119396925 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.119612932 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.119663954 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.119891882 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.119910002 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.119930983 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.120335102 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.120340109 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.120472908 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.120482922 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.120827913 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.121161938 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.121191025 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.121613979 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.121619940 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.132239103 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.132647038 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.132716894 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.133941889 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.133955956 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.134001017 CET	50761	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.134006977 CET	443	50761	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.135682106 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.135799885 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.135885954 CET	50760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.141515970 CET	50760	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.141527891 CET	443	50760	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.142335892 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.142430067 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.151119947 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.151129007 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.151448965 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.153222084 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.153275967 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.153331041 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.153398991 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.153548002 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.153563023 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.153980017 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.154007912 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.154135942 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.154565096 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.154575109 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.163777113 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.163800955 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.163867950 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.163893938 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.163939953 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164100885 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164119005 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164150000 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164158106 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164177895 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164194107 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164335966 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164351940 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164402008 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164411068 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164453030 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164608002 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164623022 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164686918 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164695024 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164732933 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164936066 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164951086 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.164988995 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.164997101 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165019989 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.165038109 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.165052891 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165067911 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165093899 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.165100098 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165123940 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.165139914 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.165461063 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165477037 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165523052 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.165529966 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165566921 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.165867090 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165879965 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165971994 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.165997982 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.166004896 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.166023016 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.166035891 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.166052103 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.199331999 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.218400002 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.220602989 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.220875978 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.220932961 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.220948935 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.220963001 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.221039057 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.221060991 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.221076012 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.221085072 CET	50765	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.221090078 CET	443	50765	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.222783089 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.222955942 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.223021030 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.223303080 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.223325968 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.223345041 CET	50764	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.223350048 CET	443	50764	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.224253893 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.224289894 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.224401951 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.224495888 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.224503040 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.226602077 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.226629972 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.226741076 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.227087021 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.227102041 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.250797987 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.250838041 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.250873089 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.250902891 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.250927925 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.250946999 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251176119 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251193047 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251224995 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251234055 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251257896 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251276970 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251329899 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251346111 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251385927 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251394033 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251426935 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251540899 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251557112 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251621962 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251622915 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251631975 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251698017 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251827002 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251848936 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.251907110 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251907110 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.251914978 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.253207922 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.402682066 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.402704954 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.402733088 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.402769089 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.402775049 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.402800083 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.402890921 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.403062105 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.403126955 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.403132915 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.403650045 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.403698921 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.405608892 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.405653000 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.405715942 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.405740976 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.405757904 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.405807972 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.405827045 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.405833960 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.405842066 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.405869961 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.405905008 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406114101 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406128883 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406172037 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406178951 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406198025 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406217098 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406384945 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406423092 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406444073 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406450987 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406471014 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406491995 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406755924 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406774044 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406820059 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406826019 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.406862974 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.406869888 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408025026 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.408037901 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.408054113 CET	50763	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:52.408060074 CET	443	50763	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:52.408082962 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408104897 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408138037 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408148050 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408198118 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408226967 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408245087 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408271074 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408277988 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408296108 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408317089 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408339977 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408356905 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408386946 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408391953 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.408415079 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.408449888 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.492325068 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.492361069 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.492400885 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.492425919 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.492450953 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.492465019 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.492522955 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.492553949 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.492578030 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.492585897 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.492614031 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.492629051 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.492965937 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.492980957 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493014097 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493021011 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493045092 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493073940 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493123055 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493138075 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493181944 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493189096 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493210077 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493222952 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493228912 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493251085 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493274927 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493278980 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493297100 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.493347883 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493916035 CET	50749	443	192.168.2.5	124.43.145.124
Nov 20, 2024 03:24:52.493937016 CET	443	50749	124.43.145.124	192.168.2.5
Nov 20, 2024 03:24:52.756613016 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.758214951 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.758236885 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.758824110 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.758829117 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.819029093 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.819803953 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.856540918 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.856915951 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.856990099 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.857667923 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.858794928 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.859724998 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.863501072 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.863512993 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.864262104 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.864268064 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.865246058 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.865282059 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.865663052 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.865672112 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.866727114 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.878531933 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.878554106 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.879852057 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.879867077 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.880430937 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.880439997 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.881066084 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.881072044 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.885556936 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.885576963 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.885587931 CET	50766	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.885592937 CET	443	50766	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.941721916 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.941760063 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.941874027 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.943092108 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.943104029 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.959309101 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.959466934 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.959522963 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.959532976 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.959579945 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.960638046 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.960638046 CET	50770	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.960654020 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.960664034 CET	443	50770	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.960812092 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.960828066 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.960951090 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.960962057 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.961342096 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.961483955 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.978557110 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.978749990 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.979038954 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.979815960 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.980209112 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.980503082 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.991839886 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.991839886 CET	50768	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:52.991851091 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:52.991858959 CET	443	50768	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.001200914 CET	50769	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.001220942 CET	443	50769	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.009027958 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.009058952 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.009073973 CET	50767	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.009088993 CET	443	50767	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.012598991 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.012634993 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.013150930 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.020072937 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.020119905 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.020365953 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.021795034 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.021828890 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.021919966 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.021940947 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.021965027 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.023042917 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.023052931 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.023181915 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.023194075 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.023240089 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.023365974 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.023375988 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.023554087 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.023564100 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.026308060 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:53.026356936 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:53.026453972 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:53.026829004 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:53.026845932 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:53.552061081 CET	443	49775	23.1.237.91	192.168.2.5
Nov 20, 2024 03:24:53.555347919 CET	49775	443	192.168.2.5	23.1.237.91
Nov 20, 2024 03:24:53.589696884 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.590356112 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.590385914 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.594882011 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.594890118 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.658870935 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.659384966 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.659408092 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.660017967 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.660022020 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.660927057 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.661911964 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.661926985 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.662271023 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.662276983 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.679984093 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.680489063 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.680505037 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.681014061 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.681019068 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.691059113 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.691241026 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.691289902 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.691296101 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.691354036 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.691581011 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.691591024 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.691603899 CET	50771	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.691608906 CET	443	50771	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.697007895 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.727226973 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:53.727307081 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:53.748765945 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.761276007 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.761356115 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.761482000 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.761522055 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.762620926 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.763252974 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.763264894 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.763487101 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.763875008 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.763964891 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.786223888 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.786330938 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.786429882 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.789453983 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.789468050 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.789836884 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.789859056 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.789874077 CET	50775	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.789879084 CET	443	50775	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.795133114 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:53.795165062 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:53.795562983 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:53.798943996 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.798995018 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.799062967 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.799753904 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:53.800117970 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.800146103 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.800270081 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.800297976 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.800493956 CET	50772	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.800499916 CET	443	50772	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.801491022 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.801501989 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.801521063 CET	50773	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.801525116 CET	443	50773	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.804049015 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.804078102 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.804354906 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.804491997 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.804502010 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.805414915 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.805428982 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.805496931 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.805891991 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.805898905 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.806950092 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.806979895 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.807132006 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.807307005 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.807324886 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.843333006 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:53.891820908 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.891849041 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.891968966 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.891990900 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.893753052 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.893851042 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.959675074 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.959712029 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:53.959724903 CET	50774	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:53.959731102 CET	443	50774	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.003992081 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.004005909 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.004055977 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.004998922 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.005007029 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.031989098 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.032011032 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.032031059 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.032089949 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:54.032114983 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.032162905 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:54.032912970 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.032948971 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.032967091 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:54.032974958 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.032999039 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:54.033411980 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.033452034 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:54.084081888 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:54.084112883 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.084129095 CET	50776	443	192.168.2.5	20.109.210.53
Nov 20, 2024 03:24:54.084136963 CET	443	50776	20.109.210.53	192.168.2.5
Nov 20, 2024 03:24:54.455326080 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.463825941 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.466689110 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.492911100 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.509030104 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.509030104 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.509228945 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.553034067 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.636951923 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.636975050 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.637634993 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.637645960 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.640208006 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.640224934 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.641401052 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.641408920 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.642216921 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.642230988 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.643110037 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.643114090 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.643718958 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.643733025 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.645556927 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.645565033 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.661510944 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.662147045 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.662162066 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.705820084 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.705837011 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.735874891 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.736056089 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.736100912 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.736116886 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.736155987 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.737868071 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.738121986 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.738163948 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.740447044 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.740664959 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.740715981 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.740740061 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.740765095 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.741275072 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.741347075 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.741422892 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.770282984 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.770283937 CET	50778	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.770354986 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.770371914 CET	443	50778	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.770418882 CET	50781	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.770431042 CET	443	50781	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.771533012 CET	50780	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.771541119 CET	443	50780	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.771945000 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.771970034 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.771991968 CET	50779	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.771998882 CET	443	50779	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.803030968 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.803364038 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.803411961 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.832583904 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.832638979 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.832770109 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.832880020 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.832902908 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.832920074 CET	50782	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.832925081 CET	443	50782	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.835345984 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.835386038 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.835438013 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.838280916 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.838319063 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.838424921 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.838643074 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.838677883 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.840698957 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.840728045 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.840776920 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.840944052 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.840959072 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.902650118 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.902689934 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.902781963 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.903189898 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.903213024 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.903578997 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.903594017 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:54.905401945 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:54.905414104 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.471091032 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.471658945 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.471688032 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.472137928 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.472145081 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.475163937 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.475769043 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.475785971 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.476548910 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.476553917 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.569499016 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.569670916 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.569742918 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.576129913 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.576380968 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.576433897 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.576487064 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.589363098 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.589363098 CET	50783	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.589389086 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.589402914 CET	443	50783	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.590485096 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.590485096 CET	50786	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.590514898 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.590522051 CET	443	50786	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.598232031 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.598264933 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.598407984 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.600378036 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.600393057 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.602462053 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.602526903 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.602608919 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.602916002 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.602943897 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.694402933 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.694479942 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.703876972 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.703892946 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.707710981 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.707736015 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.707904100 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.707907915 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.708128929 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.708136082 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.726939917 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.727412939 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.727422953 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.727859020 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.727861881 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.802983999 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.803220987 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.803446054 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.803494930 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.803509951 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.803519011 CET	50785	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.803524017 CET	443	50785	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.806540966 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.806638002 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.806727886 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.806905985 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.806941986 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.809602022 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.809855938 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.809916973 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.809921980 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.810007095 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.810053110 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.810072899 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.810084105 CET	50784	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.810090065 CET	443	50784	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.814802885 CET	50792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.814838886 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.814927101 CET	50792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.815116882 CET	50792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.815129042 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.833129883 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.833416939 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.833473921 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.833486080 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.833540916 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.833579063 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.833584070 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.833601952 CET	50787	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.833606005 CET	443	50787	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.835958004 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.835993052 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:55.836185932 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.836185932 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:55.836216927 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.233448029 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.246912003 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.298863888 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.298887968 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.300334930 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.300339937 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.301706076 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.301734924 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.302596092 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.302603006 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.395451069 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.396045923 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.396097898 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.401029110 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.401185036 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.401256084 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.453161001 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.457392931 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.469175100 CET	50792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.469203949 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.469629049 CET	50792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.469633102 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.469916105 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.469938040 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.470537901 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.470561028 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.470649004 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.470649004 CET	50789	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.470676899 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.470689058 CET	443	50789	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.472266912 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.472292900 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.472309113 CET	50788	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.472316027 CET	443	50788	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.500169039 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.568247080 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.568845034 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.568944931 CET	50792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.569391012 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.569454908 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.571708918 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.625577927 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.908442020 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.908468008 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.909378052 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.909384966 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.919852018 CET	50792	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.919922113 CET	443	50792	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.921026945 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.921060085 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.921077967 CET	50791	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.921083927 CET	443	50791	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.938188076 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.938260078 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.938333988 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.938668013 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.938699961 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.940320969 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.940361023 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.940412045 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.954648972 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.954673052 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.961374044 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.961411953 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.961478949 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.961636066 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.961646080 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.975807905 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:56.975841045 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:56.975898027 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.009793043 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.010114908 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.010174990 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.026921034 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.026937962 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.030318022 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.030344963 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.030359983 CET	50793	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.030366898 CET	443	50793	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.038742065 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.038764000 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.038830996 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.039017916 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.039027929 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.598814964 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.599181890 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.599303007 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.599402905 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.599765062 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.599778891 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.600047112 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.600065947 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.600516081 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.600521088 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.602978945 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.603411913 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.603449106 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.604017973 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.604026079 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.683301926 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.683828115 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.683842897 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.684501886 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.684505939 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.720455885 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.720609903 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.720657110 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.720668077 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.720720053 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.720779896 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.720913887 CET	50796	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.720931053 CET	443	50796	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.723006964 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.723298073 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.723360062 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.723368883 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.723421097 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.723738909 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.723777056 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.723804951 CET	50794	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.723819971 CET	443	50794	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.725310087 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.725351095 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.725406885 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.725878954 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.725895882 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.726429939 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.726886034 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.726898909 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.727596045 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.727600098 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.728445053 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.728517056 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.728583097 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.728722095 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.728750944 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.729336977 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.729496956 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.729577065 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.729623079 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.729623079 CET	50795	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.729645967 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.729671001 CET	443	50795	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.731818914 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.731869936 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.731941938 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.732034922 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.732052088 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.804559946 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.804619074 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.804665089 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.804832935 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.804856062 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.804869890 CET	50797	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.804876089 CET	443	50797	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.808320045 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.808362961 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.808428049 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.808566093 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.808572054 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.828326941 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.828593016 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.828663111 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.828676939 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.828712940 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.828830957 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.828830957 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.828931093 CET	50798	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.828941107 CET	443	50798	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.831829071 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.831872940 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:57.831957102 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.832164049 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:57.832190990 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.375685930 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.376204014 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.376251936 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.376671076 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.376678944 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.385417938 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.385829926 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.385860920 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.386248112 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.386256933 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.395726919 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.396104097 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.396157026 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.396496058 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.396509886 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.461596012 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.462090969 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.462132931 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.462539911 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.462559938 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.468364954 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.468843937 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.468866110 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.469280005 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.469288111 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.481168985 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.481374979 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.481441021 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.481481075 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.481501102 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.481513977 CET	50801	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.481522083 CET	443	50801	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.485280991 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.485327005 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.485496044 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.485657930 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.485677004 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.490508080 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.490782976 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.490839958 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.490871906 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.490890026 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.490904093 CET	50799	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.490914106 CET	443	50799	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.493091106 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.493109941 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.493310928 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.493400097 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.493412018 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.498557091 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.498620033 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.498692989 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.498718023 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.498748064 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.498801947 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.499300957 CET	50800	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.499342918 CET	443	50800	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.501777887 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.501811028 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.501909971 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.502075911 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.502093077 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.565737963 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.565777063 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.565854073 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.565911055 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.566097975 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.566164970 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.566230059 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.566267014 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.566267014 CET	50803	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.566287994 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.566308975 CET	443	50803	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.569318056 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.569331884 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.569438934 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.569760084 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.569768906 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.582529068 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.582546949 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.582632065 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.582678080 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.582860947 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.582860947 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.582900047 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.583040953 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.583070993 CET	443	50802	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.583117962 CET	50802	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.585505009 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.585539103 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:58.585692883 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.585855961 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:58.585870028 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.130089045 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.135426998 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.135459900 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.136044979 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.136054039 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.140239000 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.140661955 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.140680075 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.141292095 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.141300917 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.151501894 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.151818991 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.151849985 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.152299881 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.152308941 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.220961094 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.235724926 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.236088991 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.236140013 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.236157894 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.236207962 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.242332935 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.242748022 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.243338108 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.251533031 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.251554966 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.252336979 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.252366066 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.252382040 CET	50804	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.252388000 CET	443	50804	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.252933979 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.252938986 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.255836010 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.256311893 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.256328106 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.256720066 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.256724119 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.256942987 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.257009983 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.257092953 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.257112026 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.257127047 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.257179022 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.261785984 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.261806965 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.261833906 CET	50806	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.261840105 CET	443	50806	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.278829098 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.278829098 CET	50805	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.278851032 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.278860092 CET	443	50805	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.347585917 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.347884893 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.350011110 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.358935118 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.359045029 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.359083891 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.359118938 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.359159946 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.403114080 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.403148890 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.403240919 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.462404966 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.462430000 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.462513924 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.473195076 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.473203897 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.473562002 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.473562002 CET	50807	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.473592043 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.473607063 CET	443	50807	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.475008965 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.475017071 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.475028992 CET	50808	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.475033045 CET	443	50808	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.477540016 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.477557898 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.496512890 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.496543884 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.496603966 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.504992008 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.505006075 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.507018089 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.507056952 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.507122040 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.507942915 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.507956028 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.508147001 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.508172989 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:24:59.508474112 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.511329889 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:24:59.511343956 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.134670973 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.135112047 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.135127068 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.135629892 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.135634899 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.141639948 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.142131090 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.142146111 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.143856049 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.143861055 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.174870968 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.175396919 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.175411940 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.175868988 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.175874949 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.187175989 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.188322067 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.188337088 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.188890934 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.188895941 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.189475060 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.190072060 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.190107107 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.190558910 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.190572023 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.248672009 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.248774052 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.248857975 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.249404907 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.249425888 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.249439001 CET	50809	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.249444962 CET	443	50809	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.252574921 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.252616882 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.252679110 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.252845049 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.252860069 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.276428938 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.276566982 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.276741982 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.276741982 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.277053118 CET	50813	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.277070045 CET	443	50813	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.280345917 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.280371904 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.280432940 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.280873060 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.280884027 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.290265083 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.290412903 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.290463924 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.290472031 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.290515900 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.290560961 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.290572882 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.290591002 CET	50811	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.290596008 CET	443	50811	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.293103933 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.293132067 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.293205023 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.293446064 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.293456078 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.298705101 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.298935890 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.298990011 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.299019098 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.299031019 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.299068928 CET	50812	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.299073935 CET	443	50812	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.301456928 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.301480055 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.301543951 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.301734924 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.301749945 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.527028084 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.527250051 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.527290106 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.527304888 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.527326107 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.527376890 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.527506113 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.527525902 CET	50810	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.527529001 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.527535915 CET	443	50810	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.531615973 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.531637907 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.531694889 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.531886101 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.531897068 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.897079945 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.897614956 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.897663116 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.898180008 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.898191929 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.938462019 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.939007998 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.939033031 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.939511061 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.939517021 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.959661961 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.960154057 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.960197926 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:00.960700035 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:00.960726023 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.001267910 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.001651049 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.001730919 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.001799107 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.001799107 CET	50814	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.001823902 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.001849890 CET	443	50814	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.004575014 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.004606962 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.004781961 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.004899979 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.004918098 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.039750099 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.039963007 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.040174007 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.040204048 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.040225983 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.040236950 CET	50817	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.040241957 CET	443	50817	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.042752981 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.042809010 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.042958021 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.043131113 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.043159008 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.063127041 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.063185930 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.063267946 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.063292027 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.063330889 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.063410997 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.063461065 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.063482046 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.063489914 CET	50815	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.063498020 CET	443	50815	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.065901041 CET	50821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.065947056 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.066052914 CET	50821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.069063902 CET	50821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.069091082 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.170125961 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.171824932 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.171848059 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.172348022 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.172353983 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.268618107 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.268708944 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.268841982 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.268856049 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.268958092 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.269027948 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.269069910 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.269069910 CET	50818	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.269087076 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.269095898 CET	443	50818	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.271828890 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.271883011 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.271970987 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.272157907 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.272186041 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.667181969 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.667853117 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.667877913 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.668346882 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.668351889 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.679275036 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.679850101 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.679888964 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.680326939 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.680340052 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.734231949 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.735515118 CET	50821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.735541105 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.736052990 CET	50821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.736062050 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.766998053 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.767209053 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.767280102 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.767532110 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.767549038 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.767560959 CET	50819	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.767565966 CET	443	50819	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.770478010 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.770524979 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.770889044 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.771135092 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.771148920 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.796250105 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.796540976 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.796588898 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.796617031 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.796669960 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.796973944 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.797015905 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.797041893 CET	50820	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.797058105 CET	443	50820	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.799756050 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.799841881 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.799936056 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.800239086 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.800275087 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.838278055 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.838500023 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.839169979 CET	50821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.907387972 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.914768934 CET	50821	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.914814949 CET	443	50821	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.916277885 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.916337013 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.916812897 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.916831017 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.918361902 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.918394089 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:01.918663025 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.918839931 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:01.918850899 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.044496059 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.045173883 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.045254946 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.046389103 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.046396017 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.046411037 CET	50822	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.046416044 CET	443	50822	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.049422026 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.049447060 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.049515963 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.049679995 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.049691916 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.135471106 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.135988951 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.136034966 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.136601925 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.136616945 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.142740011 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.143198967 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.143220901 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.143681049 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.143690109 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.240164995 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.240469933 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.240539074 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.240690947 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.240741014 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.240773916 CET	50824	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.240792036 CET	443	50824	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.243868113 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.243916988 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.243995905 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.244275093 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.244287968 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.246972084 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.247107983 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.247173071 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.247184992 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.247348070 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.247510910 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.247510910 CET	50823	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.247529030 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.247539997 CET	443	50823	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.251924038 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.251959085 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.252021074 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.252494097 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.252505064 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.676040888 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.676779032 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.676815987 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.677227020 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.677233934 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.768686056 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.769217968 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.769251108 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.769665956 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.769671917 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.776500940 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.776895046 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.776966095 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.777010918 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.777026892 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.777036905 CET	50825	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.777043104 CET	443	50825	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.780654907 CET	50829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.780699968 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.781105042 CET	50829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.781105042 CET	50829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.781131983 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.874180079 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.874881983 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.874937057 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.874993086 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.876342058 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.876368046 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.876388073 CET	50826	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.876394033 CET	443	50826	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.884788990 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.884835958 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.884898901 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.885072947 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.885086060 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.943089008 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.943660975 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.943702936 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.944137096 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.944144011 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.964517117 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.964792967 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.965027094 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.965063095 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.965312004 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.965332031 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.965699911 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.965712070 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:03.965894938 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:03.965898991 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.048769951 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.055620909 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.055691004 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.055696011 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.055754900 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.055847883 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.055870056 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.055883884 CET	50828	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.055891037 CET	443	50828	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.059334993 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.059385061 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.059540987 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.059675932 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.059686899 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.064821959 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.065290928 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.065347910 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.065380096 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.065392971 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.065406084 CET	50816	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.065417051 CET	443	50816	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.068078995 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.068116903 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.068224907 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.068377018 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.068387985 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.068586111 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.070058107 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.070110083 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.070135117 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.070143938 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.070154905 CET	50827	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.070158958 CET	443	50827	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.072393894 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.072431087 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.072535992 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.072653055 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.072663069 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.436968088 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.438283920 CET	50829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.438306093 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.439002037 CET	50829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.439006090 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.548276901 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.551094055 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.551299095 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.551485062 CET	50829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.594302893 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.597413063 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.597423077 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.598253012 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.598258018 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.598423004 CET	50829	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.598443985 CET	443	50829	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.601049900 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.601097107 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.601178885 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.601327896 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.601344109 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.705990076 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.706060886 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.706190109 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.707355022 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.732064009 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.735644102 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.755810022 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.778292894 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.778330088 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.778815985 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.778825998 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.782491922 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.792819023 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.792848110 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.792886972 CET	50830	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.792893887 CET	443	50830	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.799592018 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.799607038 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.800050974 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.800056934 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.805872917 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.805890083 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.809417009 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.809423923 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.836536884 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.836589098 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.836668015 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.843434095 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.843465090 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.911401033 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.911504030 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.911739111 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.911974907 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.911990881 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.912055016 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.912236929 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.912236929 CET	50833	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.912276030 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.912303925 CET	443	50833	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.913371086 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.913379908 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.913402081 CET	50831	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.913407087 CET	443	50831	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.916888952 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.916906118 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.916969061 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.917628050 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.917642117 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.917715073 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.917908907 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.917920113 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.918013096 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.918025017 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.921407938 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.921443939 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.921513081 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.921578884 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.922384024 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.922404051 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.922415018 CET	50832	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.922420025 CET	443	50832	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.925623894 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.925638914 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:04.925823927 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.926044941 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:04.926053047 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.246481895 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.247071028 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.247104883 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.247441053 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.247446060 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.347245932 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.347496986 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.347544909 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.347558975 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.347614050 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.347639084 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.347659111 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.347670078 CET	50834	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.347676039 CET	443	50834	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.350531101 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.350574017 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.350631952 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.350806952 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.350816965 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.524871111 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.525391102 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.525433064 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.525856972 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.525863886 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.555283070 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.555977106 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.555990934 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.556610107 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.556612968 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.557173014 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.557652950 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.557679892 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.558171034 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.558176994 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.592770100 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.593978882 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.593991995 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.594439030 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.594441891 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.630749941 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.631243944 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.631298065 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.631361961 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.631381989 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.631392956 CET	50835	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.631398916 CET	443	50835	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.634393930 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.634428978 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.634579897 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.634746075 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.634756088 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.655705929 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.655829906 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.655885935 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.655997038 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.656008959 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.656018019 CET	50837	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.656023026 CET	443	50837	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.658792019 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.658823967 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.658881903 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.659013033 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.659024954 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.660913944 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.660934925 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.660978079 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.661015034 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.661015034 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.661184072 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.661184072 CET	50836	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.661195040 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.661204100 CET	443	50836	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.663587093 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.663599968 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.663660049 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.663810968 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.663815022 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.698693991 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.698770046 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.698991060 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.698991060 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.699004889 CET	50838	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.699008942 CET	443	50838	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.703233004 CET	50843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.703262091 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.703321934 CET	50843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.703458071 CET	50843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.703469038 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.991720915 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.992229939 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.992245913 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:05.992753029 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:05.992757082 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.092329025 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.092581034 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.092655897 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.092695951 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.092715979 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.092725992 CET	50839	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.092731953 CET	443	50839	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.095515966 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.095554113 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.095690012 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.095896959 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.095909119 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.286375046 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.286884069 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.286910057 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.287339926 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.287347078 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.297732115 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.298058987 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.298182011 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.298214912 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.298490047 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.298526049 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.298715115 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.298722029 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.298978090 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.298983097 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.350574970 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.352252960 CET	50843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.352294922 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.352813959 CET	50843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.352821112 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.386610031 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.387109041 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.387159109 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.387162924 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.387216091 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.387409925 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.387424946 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.387434959 CET	50840	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.387440920 CET	443	50840	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.393035889 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.393083096 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.393138885 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.393662930 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.393685102 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.397290945 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.397408962 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.397458076 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.397653103 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.397660017 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.397667885 CET	50842	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.397670984 CET	443	50842	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.398161888 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.398282051 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.398380041 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.398578882 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.398601055 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.398616076 CET	50841	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.398622036 CET	443	50841	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.400463104 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.400496960 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.400612116 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.401123047 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.401137114 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.401701927 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.401736021 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.402199984 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.402343035 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.402359009 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.451040983 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.451236963 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.451302052 CET	50843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.451927900 CET	50843	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.451947927 CET	443	50843	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.454996109 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.455033064 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.455203056 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.455353975 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.455365896 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.736747980 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.737258911 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.737278938 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.737785101 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.737792015 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.832636118 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.832876921 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.832972050 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.833087921 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.833087921 CET	50844	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.833105087 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.833113909 CET	443	50844	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.835818052 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.835870028 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:06.836108923 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.836266041 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:06.836281061 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.026953936 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.027508020 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.027570009 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.027993917 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.028007984 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.041866064 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.042355061 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.042390108 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.042820930 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.042831898 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.061460972 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.062854052 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.062877893 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.063497066 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.063517094 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.096765041 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.097392082 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.097409010 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.097907066 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.097912073 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315129042 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315196991 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315325975 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315376997 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.315392017 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315399885 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315449953 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.315522909 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315557003 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.315557957 CET	50845	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.315597057 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315617085 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.315617085 CET	50846	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.315642118 CET	443	50845	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315644979 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315648079 CET	443	50846	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.315687895 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.315963030 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.316034079 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.316117048 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.316127062 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.316144943 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.316175938 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.316185951 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.316194057 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.316231012 CET	50847	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.316246033 CET	443	50847	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.316741943 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.316755056 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.316764116 CET	50848	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.316768885 CET	443	50848	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.319670916 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.319693089 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.319694996 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.319730997 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.319746017 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.319775105 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.320883989 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.320905924 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.320971966 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.320991993 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.321005106 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.321024895 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.321157932 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.321166039 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.321217060 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.321227074 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.321266890 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.321283102 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.321513891 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.321522951 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.499414921 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.500015020 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.500041008 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.500541925 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.500552893 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.598387003 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.598710060 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.598798037 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.598839998 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.598858118 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.598872900 CET	50849	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.598877907 CET	443	50849	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.601635933 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.601665020 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.602005005 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.602005005 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.602026939 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.954693079 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.956120968 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.956156969 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.956641912 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.956646919 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.962960958 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.963401079 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.963433981 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.964220047 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.964225054 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.967370033 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.967879057 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.967907906 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.968508005 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.968516111 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.969228983 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.969609976 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.969626904 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:07.970051050 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:07.970056057 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.054981947 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.055011034 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.055067062 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.055078030 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.055330992 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.055357933 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.055376053 CET	50851	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.055382967 CET	443	50851	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.058295965 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.058329105 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.058466911 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.058602095 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.058618069 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.063173056 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.063535929 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.063582897 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.063594103 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.063637972 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.063689947 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.063705921 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.063716888 CET	50850	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.063721895 CET	443	50850	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.065947056 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.065972090 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.066138983 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.066432953 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.066442013 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.069869995 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.070065022 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.070173979 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.070173979 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.070311069 CET	50852	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.070321083 CET	443	50852	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.072304964 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.072346926 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.072499037 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.072623014 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.072634935 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.074785948 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.075087070 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.075134039 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.075171947 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.075171947 CET	50853	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.075190067 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.075206041 CET	443	50853	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.078293085 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.078313112 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.078505039 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.078605890 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.078613997 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.237150908 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.237735033 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.237771988 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.238332987 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.238339901 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.335131884 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.335623980 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.335774899 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.335774899 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.336185932 CET	50854	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.336203098 CET	443	50854	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.338673115 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.338716984 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.338784933 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.338957071 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.338967085 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.702848911 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.703629971 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.703661919 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.704011917 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.704370975 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.704377890 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.704839945 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.704854965 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.705435991 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.705440998 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.714449883 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.714889050 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.714911938 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.715310097 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.715316057 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.753118992 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.753631115 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.753659010 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.754080057 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.754087925 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805078983 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805222988 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805406094 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805476904 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.805527925 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.805527925 CET	50855	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.805546999 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805557013 CET	443	50855	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805727005 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805769920 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.805782080 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805794954 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805838108 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.805936098 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.805948973 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.805958986 CET	50856	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.805964947 CET	443	50856	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.808265924 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.808273077 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.808294058 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.808311939 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.808384895 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.808393002 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.808504105 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.808516979 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.808561087 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.808569908 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.817121029 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.817353010 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.817421913 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.817449093 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.817470074 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.817482948 CET	50857	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.817490101 CET	443	50857	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.819783926 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.819808960 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.819926023 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.820106983 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.820118904 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.863320112 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.863395929 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.863548994 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.863574028 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.863581896 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.863596916 CET	50858	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.863601923 CET	443	50858	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.866017103 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.866040945 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.866144896 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.866276026 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.866286993 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.985169888 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.985757113 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.985794067 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:08.986146927 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:08.986154079 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.085596085 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.085618973 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.085692883 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.085711956 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.085771084 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.085832119 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.085975885 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.085994959 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.086007118 CET	50859	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.086014986 CET	443	50859	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.089056969 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.089082003 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.089217901 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.089389086 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.089405060 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.447448969 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.448261023 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.448275089 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.448971987 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.448985100 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.451468945 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.452596903 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.452651024 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.453250885 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.453259945 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.464092016 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.464679956 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.464704037 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.464947939 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.464953899 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.547014952 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.547041893 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.547102928 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.547112942 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.547468901 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.547487020 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.547517061 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.547631025 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.547662973 CET	443	50860	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.547761917 CET	50860	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.550098896 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.550129890 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.550338030 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.550508976 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.550522089 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.551857948 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.552259922 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.552273989 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.552298069 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.552356958 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.552409887 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.552544117 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.552556992 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.552571058 CET	50861	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.552578926 CET	443	50861	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.552751064 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.552756071 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.554867029 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.554908991 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.554981947 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.555145979 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.555165052 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.563839912 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.563868046 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.563927889 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.563941956 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.563956976 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.564035892 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.564141989 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.564142942 CET	50862	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.564157963 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.564166069 CET	443	50862	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.566282034 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.566307068 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.566375017 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.566509008 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.566519976 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.657074928 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.657136917 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.657296896 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.657320976 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.657382965 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.657438040 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.657740116 CET	50863	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.657754898 CET	443	50863	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.660649061 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.660689116 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.660799026 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.661003113 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.661020994 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.733561039 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.734564066 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.734590054 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.735022068 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.735025883 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.905142069 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.905153036 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.905208111 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.905222893 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.905229092 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.905288935 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.905539989 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.905550003 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.905564070 CET	50864	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.905569077 CET	443	50864	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.908926010 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.908966064 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:09.909121037 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.909329891 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:09.909341097 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.141083002 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.141608000 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.141624928 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.142065048 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.142070055 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.186912060 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.187396049 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.187407017 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.187931061 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.187935114 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.192286015 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.192745924 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.192774057 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.193106890 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.193111897 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.244472980 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.244564056 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.244612932 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.244838953 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.244859934 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.244889021 CET	50867	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.244894028 CET	443	50867	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.248255968 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.248307943 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.248379946 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.248558044 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.248574972 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.287094116 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.287170887 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.287379980 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.287434101 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.287450075 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.287463903 CET	50865	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.287470102 CET	443	50865	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.290276051 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.290301085 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.290424109 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.290570974 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.290590048 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.291989088 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.292052031 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.292154074 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.292232037 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.292248964 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.292262077 CET	50866	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.292268038 CET	443	50866	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.294501066 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.294533968 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.294616938 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.295053959 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.295075893 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.299290895 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.299722910 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.299751997 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.300144911 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.300152063 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.398550034 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.398793936 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.398864985 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.398947001 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.398947001 CET	50868	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.398967981 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.398973942 CET	443	50868	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.401732922 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.401782990 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.402049065 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.402215958 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.402225971 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.586097956 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.586697102 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.586719990 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.587227106 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.587232113 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.816420078 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.816450119 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.816502094 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.816531897 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.816637993 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.816885948 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.816885948 CET	50869	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.816900015 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.816910028 CET	443	50869	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.819947004 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.820002079 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:10.820216894 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.820442915 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:10.820471048 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.004646063 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.005094051 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.005207062 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.005235910 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.005517960 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.005548954 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.005733013 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.005737066 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.006061077 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.006078959 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.010927916 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.011276007 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.011302948 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.011682987 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.011688948 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.030555010 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.031224012 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.031245947 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.031773090 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.031779051 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.104695082 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.104724884 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.104790926 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.104811907 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105021000 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105051041 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105057001 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105082035 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.105098009 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105104923 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.105104923 CET	50870	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.105108023 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.105113029 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105115891 CET	443	50870	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105137110 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105180979 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.105221033 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.106291056 CET	50872	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.106314898 CET	443	50872	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.110743999 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.110790968 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.110989094 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.111326933 CET	50876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.111357927 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.111427069 CET	50876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.111577034 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.111586094 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.111912012 CET	50876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.111922026 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.119725943 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.119759083 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.119774103 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.119822979 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.119848013 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.119891882 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.119946003 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.164392948 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.164417028 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.164448977 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.164494038 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.164522886 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.164537907 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.164565086 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.210393906 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.210475922 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.210478067 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.210532904 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.210649014 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.210649014 CET	50871	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.210658073 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.210665941 CET	443	50871	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.214559078 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.214590073 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.214700937 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.214920044 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.214934111 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.249254942 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.249346018 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.249351978 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.249416113 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.251838923 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.251858950 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.251871109 CET	50873	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.251877069 CET	443	50873	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.254578114 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.254633904 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.254704952 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.254863024 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.254874945 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.460844040 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.508296967 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.558159113 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.558175087 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.558619976 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.558625937 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.660505056 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.660564899 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.660610914 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.660624981 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.660651922 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.660754919 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.660880089 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.668143988 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.668173075 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.668190956 CET	50874	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.668199062 CET	443	50874	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.677320004 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.684067011 CET	50876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.684078932 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.684642076 CET	50876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.684647083 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.688335896 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.688352108 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.688452005 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.688627005 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.688633919 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.755027056 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.755496979 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.755536079 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.756094933 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.756108999 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.780673027 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.780750036 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.780829906 CET	50876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.780839920 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.780890942 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.781040907 CET	50876	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.781060934 CET	443	50876	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.791870117 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.791899920 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.791973114 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.792139053 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.792145967 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.855217934 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.855484962 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.855576038 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.855695963 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.855695963 CET	50875	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.855746031 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.855792046 CET	443	50875	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.858489990 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.858527899 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.858750105 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.859014034 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.859026909 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.879964113 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.880475998 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.880495071 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.880940914 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.880945921 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.922550917 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.923096895 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.923119068 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.923551083 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.923556089 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.990561962 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.990741014 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.990876913 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.990910053 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.990910053 CET	50877	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.990925074 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.990933895 CET	443	50877	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.993659019 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.993685007 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:11.993757963 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.993961096 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:11.993974924 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.024807930 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.024981022 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.025055885 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.025188923 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.025207043 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.025216103 CET	50878	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.025222063 CET	443	50878	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.027952909 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.027976036 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.028044939 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.028197050 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.028209925 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.341595888 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.342256069 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.342278004 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.342701912 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.342706919 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.465714931 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.466656923 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.466674089 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.467168093 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.467171907 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.473339081 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.473644018 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.473790884 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.473790884 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.473814964 CET	50879	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.473829031 CET	443	50879	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.476871014 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.476927042 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.476994038 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.477159977 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.477169991 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.523487091 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.523927927 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.523962975 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.524843931 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.524851084 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.569016933 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.569097042 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.569159985 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.569175959 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.569216967 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.569602013 CET	50880	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.569619894 CET	443	50880	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.643280983 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.644025087 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.644048929 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.644654036 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.644659042 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.785434961 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.786120892 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.786180019 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.787694931 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.787710905 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.787720919 CET	50881	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.787727118 CET	443	50881	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.834646940 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.836666107 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.836730003 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.836848021 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.836848021 CET	50882	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.836865902 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.836874962 CET	443	50882	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.851187944 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.851629972 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.851650000 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.852108002 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.852112055 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.956785917 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.956939936 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.956995010 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.957083941 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.957091093 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:12.957107067 CET	50883	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:12.957110882 CET	443	50883	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:13.111105919 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:13.111613989 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:13.111633062 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:13.112082958 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:13.112088919 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:13.211256027 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:13.211328983 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:13.211543083 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:13.211570978 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:13.211584091 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:13.211591959 CET	50884	443	192.168.2.5	13.107.246.45
Nov 20, 2024 03:25:13.211597919 CET	443	50884	13.107.246.45	192.168.2.5
Nov 20, 2024 03:25:22.631608009 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:22.631679058 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:22.631830931 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:22.632195950 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:22.632234097 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:23.264998913 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:23.265305042 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:23.265326977 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:23.265780926 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:23.266267061 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:23.266396999 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:23.311786890 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:33.210380077 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:33.210462093 CET	443	50886	142.250.186.132	192.168.2.5
Nov 20, 2024 03:25:33.210642099 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:35.167994976 CET	50886	443	192.168.2.5	142.250.186.132
Nov 20, 2024 03:25:35.168044090 CET	443	50886	142.250.186.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 20, 2024 03:24:18.804949045 CET	53	52488	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:18.878005028 CET	53	51579	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:19.862540007 CET	53	53262	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:20.131920099 CET	52543	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:20.132117033 CET	53117	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:20.973937988 CET	53	53117	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:21.167854071 CET	56153	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:21.838778973 CET	53	56153	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:22.337565899 CET	53	52543	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:22.561301947 CET	54068	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:22.561444044 CET	50878	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:22.567928076 CET	53	54068	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:22.568274975 CET	53	50878	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:23.582617998 CET	53	50716	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:29.617954016 CET	56077	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:29.618170977 CET	59712	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:29.707451105 CET	54851	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:29.707616091 CET	55443	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:29.763755083 CET	53	59187	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:30.178008080 CET	53	59712	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:30.268289089 CET	53	55443	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:30.269750118 CET	53	54851	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:30.533835888 CET	53	56077	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:33.730257988 CET	60484	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:33.730407953 CET	53843	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:33.868333101 CET	53	60484	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:33.868843079 CET	53	53843	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:36.990668058 CET	53	59944	1.1.1.1	192.168.2.5
Nov 20, 2024 03:24:47.194477081 CET	53	64550	162.159.36.2	192.168.2.5
Nov 20, 2024 03:24:47.674326897 CET	52614	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:24:47.681262970 CET	53	52614	1.1.1.1	192.168.2.5
Nov 20, 2024 03:25:22.616961002 CET	49159	53	192.168.2.5	1.1.1.1
Nov 20, 2024 03:25:22.623692036 CET	53	49159	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 20, 2024 03:24:22.337793112 CET	192.168.2.5	1.1.1.1	c1f9	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 20, 2024 03:24:20.131920099 CET	192.168.2.5	1.1.1.1	0x4b01	Standard query (0)	ebis.waterboard.lk	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:20.132117033 CET	192.168.2.5	1.1.1.1	0xb8a4	Standard query (0)	ebis.waterboard.lk	65	IN (0x0001)	false
Nov 20, 2024 03:24:21.167854071 CET	192.168.2.5	1.1.1.1	0xd95b	Standard query (0)	ebis.waterboard.lk	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:22.561301947 CET	192.168.2.5	1.1.1.1	0x5efe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:22.561444044 CET	192.168.2.5	1.1.1.1	0x48fd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 20, 2024 03:24:29.617954016 CET	192.168.2.5	1.1.1.1	0xdc4f	Standard query (0)	ebis.waterboard.lk	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:29.618170977 CET	192.168.2.5	1.1.1.1	0x4dff	Standard query (0)	ebis.waterboard.lk	65	IN (0x0001)	false
Nov 20, 2024 03:24:29.707451105 CET	192.168.2.5	1.1.1.1	0xac74	Standard query (0)	billing.waterboard.lk	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:29.707616091 CET	192.168.2.5	1.1.1.1	0x243e	Standard query (0)	billing.waterboard.lk	65	IN (0x0001)	false
Nov 20, 2024 03:24:33.730257988 CET	192.168.2.5	1.1.1.1	0x34e0	Standard query (0)	billing.waterboard.lk	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:33.730407953 CET	192.168.2.5	1.1.1.1	0x7af1	Standard query (0)	billing.waterboard.lk	65	IN (0x0001)	false
Nov 20, 2024 03:24:47.674326897 CET	192.168.2.5	1.1.1.1	0x33b0	Standard query (0)	15.164.165.52.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Nov 20, 2024 03:25:22.616961002 CET	192.168.2.5	1.1.1.1	0x3ed1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 20, 2024 03:24:21.838778973 CET	1.1.1.1	192.168.2.5	0xd95b	No error (0)	ebis.waterboard.lk		124.43.162.133	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:22.337565899 CET	1.1.1.1	192.168.2.5	0x4b01	No error (0)	ebis.waterboard.lk		124.43.162.133	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:22.567928076 CET	1.1.1.1	192.168.2.5	0x5efe	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:22.568274975 CET	1.1.1.1	192.168.2.5	0x48fd	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 20, 2024 03:24:30.269750118 CET	1.1.1.1	192.168.2.5	0xac74	No error (0)	billing.waterboard.lk		124.43.145.124	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:30.533835888 CET	1.1.1.1	192.168.2.5	0xdc4f	No error (0)	ebis.waterboard.lk		124.43.162.133	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:33.868333101 CET	1.1.1.1	192.168.2.5	0x34e0	No error (0)	billing.waterboard.lk		124.43.145.124	A (IP address)	IN (0x0001)	false
Nov 20, 2024 03:24:47.681262970 CET	1.1.1.1	192.168.2.5	0x33b0	Name error (3)	15.164.165.52.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Nov 20, 2024 03:25:22.623692036 CET	1.1.1.1	192.168.2.5	0x3ed1	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ebis.waterboard.lk

https:

billing.waterboard.lk

fs.microsoft.com

otelrules.azureedge.net

slscr.update.microsoft.com

fe3cr.delivery.mp.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:23 UTC	682	OUT	GET /ebill/?key=oTodKq4I3Q HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:23 UTC	265	IN	HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "d46d98cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:16 GMT Connection: close Content-Length: 889
2024-11-20 02:24:23 UTC	889	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2e 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="./favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Copyright

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:23 UTC	590	OUT	GET /ebill/static/css/main.e6a39b54.css HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:24 UTC	265	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "438c1cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:16 GMT Connection: close Content-Length: 15371
2024-11-20 02:24:24 UTC	15371	IN	Data Raw: 2f 2a 0a 21 20 74 61 69 6c 77 69 6e 64 63 73 73 20 76 33 2e 33 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 73 3a 2f 2f 74 61 69 6c 77 69 6e 64 63 73 73 2e 63 6f 6d 0a 2a 2f 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 65 35 65 37 65 62 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 2d 2d 74 77 2d 63 6f 6e 74 65 6e 74 3a 22 22 7d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 6e 6f Data Ascii: /! tailwindcss v3.3.3 \| MIT License \| https://tailwindcss.com/*,:after,:before{border:0 solid #e5e7eb;box-sizing:border-box}:after,:before{--tw-content:""}html{-webkit-text-size-adjust:100%;-webkit-font-feature-settings:normal;font-feature-settings:no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:24 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:24:24 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=51660 Date: Wed, 20 Nov 2024 02:24:24 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:25 UTC	574	OUT	GET /ebill/static/js/main.dd47d300.js HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:25 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Wed, 08 Nov 2023 05:31:17 GMT Accept-Ranges: bytes ETag: "dddfd8cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:18 GMT Connection: close Content-Length: 267320
2024-11-20 02:24:25 UTC	16103	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 64 64 34 37 64 33 30 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 65 3d 6e 2e 6e 6d 64 28 65 29 29 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 Data Ascii: /! For license information please see main.dd47d300.js.LICENSE.txt /!function(){var e={426:function(e,t,n){(e=n.nmd(e)).exports=function(){"use strict";var t,n;function r(){return t.apply(null,arguments)}function a(e){t=e}function i(e){return e instanc
2024-11-20 02:24:26 UTC	16384	IN	Data Raw: 21 3d 61 3f 74 2e 64 3d 61 3a 76 28 6e 29 2e 69 6e 76 61 6c 69 64 57 65 65 6b 64 61 79 3d 65 7d 29 29 2c 59 65 28 5b 22 64 22 2c 22 65 22 2c 22 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 74 5b 72 5d 3d 63 65 28 65 29 7d 29 29 3b 76 61 72 20 52 74 3d 22 53 75 6e 64 61 79 5f 4d 6f 6e 64 61 79 5f 54 75 65 73 64 61 79 5f 57 65 64 6e 65 73 64 61 79 5f 54 68 75 72 73 64 61 79 5f 46 72 69 64 61 79 5f 53 61 74 75 72 64 61 79 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6a 74 3d 22 53 75 6e 5f 4d 6f 6e 5f 54 75 65 5f 57 65 64 5f 54 68 75 5f 46 72 69 5f 53 61 74 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 4c 74 3d 22 53 75 5f 4d 6f 5f 54 75 5f 57 65 5f 54 68 5f 46 72 5f 53 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 46 74 3d 52 65 2c 41 74 3d 52 65 2c Data Ascii: !=a?t.d=a:v(n).invalidWeekday=e})),Ye(["d","e","E"],(function(e,t,n,r){t[r]=ce(e)}));var Rt="Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),jt="Sun_Mon_Tue_Wed_Thu_Fri_Sat".split("_"),Lt="Su_Mo_Tu_We_Th_Fr_Sa".split("_"),Ft=Re,At=Re,
2024-11-20 02:24:26 UTC	16384	IN	Data Raw: 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 58 6e 28 29 7b 72 65 74 75 72 6e 20 4a 6e 28 22 69 73 42 65 66 6f 72 65 22 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 72 28 29 7b 72 65 74 75 72 6e 20 4a 6e 28 22 69 73 41 66 74 65 72 22 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 29 7d 76 61 72 20 74 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 61 74 65 2e 6e 6f 77 3f 44 61 74 65 2e 6e 6f 77 28 29 3a 2b 6e 65 77 20 44 61 74 65 7d 2c 6e 72 3d 5b 22 79 65 61 72 22 2c 22 71 75 61 72 74 65 72 22 2c 22 6d 6f 6e 74 68 22 2c 22 77 65 65 6b 22 2c 22 64 61 79 22 2c 22 68 6f 75 72 22 2c 22 6d 69 6e 75 74 65 22 2c 22 Data Ascii: t[r]);return n}function Xn(){return Jn("isBefore",[].slice.call(arguments,0))}function er(){return Jn("isAfter",[].slice.call(arguments,0))}var tr=function(){return Date.now?Date.now():+new Date},nr=["year","quarter","month","week","day","hour","minute","
2024-11-20 02:24:26 UTC	16384	IN	Data Raw: 29 2c 7a 65 28 5b 22 79 22 2c 22 79 79 22 2c 22 79 79 79 22 2c 22 79 79 79 79 22 5d 2c 48 65 29 2c 7a 65 28 5b 22 79 6f 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3b 6e 2e 5f 6c 6f 63 61 6c 65 2e 5f 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 52 65 67 65 78 26 26 28 61 3d 65 2e 6d 61 74 63 68 28 6e 2e 5f 6c 6f 63 61 6c 65 2e 5f 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 52 65 67 65 78 29 29 2c 6e 2e 5f 6c 6f 63 61 6c 65 2e 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 50 61 72 73 65 3f 74 5b 48 65 5d 3d 6e 2e 5f 6c 6f 63 61 6c 65 2e 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 50 61 72 73 65 28 65 2c 61 29 3a 74 5b 48 65 5d 3d 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 29 29 2c 59 28 30 2c 5b 22 67 67 22 2c 32 5d 2c 30 2c 28 Data Ascii: ),ze(["y","yy","yyy","yyyy"],He),ze(["yo"],(function(e,t,n,r){var a;n._locale._eraYearOrdinalRegex&&(a=e.match(n._locale._eraYearOrdinalRegex)),n._locale.eraYearOrdinalParse?t[He]=n._locale.eraYearOrdinalParse(e,a):t[He]=parseInt(e,10)})),Y(0,["gg",2],0,(
2024-11-20 02:24:26 UTC	281	IN	Data Raw: 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 79 2c 67 29 3b 76 5b 74 5d 3d 6e 65 77 20 6d 28 74 2c 31 2c 21 31 2c 65 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 78 6d 6c 3a 62 61 73 65 22 2c 22 78 6d 6c 3a 6c 61 6e 67 22 2c 22 78 6d 6c 3a 73 70 61 63 65 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 79 2c 67 29 3b 76 5b 74 5d 3d 6e 65 77 20 6d 28 74 2c 31 2c 21 31 2c 65 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 Data Ascii: {var t=e.replace(y,g);v[t]=new m(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(y,g);v[t]=new m(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"
2024-11-20 02:24:26 UTC	16384	IN	Data Raw: 5d 3d 6e 65 77 20 6d 28 65 2c 31 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 76 2e 78 6c 69 6e 6b 48 72 65 66 3d 6e 65 77 20 6d 28 22 78 6c 69 6e 6b 48 72 65 66 22 2c 31 2c 21 31 2c 22 78 6c 69 6e 6b 3a 68 72 65 66 22 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 2c 21 30 2c 21 31 29 2c 5b 22 73 72 63 22 2c 22 68 72 65 66 22 2c 22 61 63 74 69 6f 6e 22 2c 22 66 6f 72 6d 41 63 74 69 6f 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 6d 28 65 2c 31 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 30 2c 21 30 29 7d 29 29 3b 76 61 72 20 77 3d 72 2e 5f 5f 53 45 43 52 45 54 Data Ascii: ]=new m(e,1,!1,e.toLowerCase(),null,!1,!1)})),v.xlinkHref=new m("xlinkHref",1,!1,"xlink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){v[e]=new m(e,1,!1,e.toLowerCase(),null,!0,!0)}));var w=r.__SECRET
2024-11-20 02:24:26 UTC	16384	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 65 2e 62 6c 6f 63 6b 65 64 4f 6e 3d 74 2c 76 6f 69 64 20 45 74 28 65 2e 70 72 69 6f 72 69 74 79 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 28 6e 29 7d 29 29 7d 65 6c 73 65 20 69 66 28 33 3d 3d 3d 74 26 26 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 75 72 72 65 6e 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2e 69 73 44 65 68 79 64 72 61 74 65 64 29 72 65 74 75 72 6e 20 76 6f 69 64 28 65 2e 62 6c 6f 63 6b 65 64 4f 6e 3d 33 3d 3d 3d 6e 2e 74 61 67 3f 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3a 6e 75 6c 6c 29 7d 65 2e 62 6c 6f 63 6b 65 64 4f 6e 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 65 2e 62 6c 6f 63 6b 65 64 4f 6e 29 72 65 74 75 72 6e 21 31 3b 66 Data Ascii: ))return e.blockedOn=t,void Et(e.priority,(function(){St(n)}))}else if(3===t&&n.stateNode.current.memoizedState.isDehydrated)return void(e.blockedOn=3===n.tag?n.stateNode.containerInfo:null)}e.blockedOn=null}function Ut(e){if(null!==e.blockedOn)return!1;f
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 3d 42 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 61 3d 24 74 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 61 3d 47 74 7d 6e 3d 61 2e 62 69 6e 64 28 6e 75 6c 6c 2c 74 2c 6e 2c 65 29 2c 61 3d 76 6f 69 64 20 30 2c 21 52 65 7c 7c 22 74 6f 75 63 68 73 74 61 72 74 22 21 3d 3d 74 26 26 22 74 6f 75 63 68 6d 6f 76 65 22 21 3d 3d 74 26 26 22 77 68 65 65 6c 22 21 3d 3d 74 7c 7c 28 61 3d 21 30 29 2c 72 3f 76 6f 69 64 20 30 21 3d 3d 61 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 70 61 73 73 69 76 65 3a 61 7d 29 3a 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 30 29 3a 76 6f 69 64 20 30 21 3d 3d 61 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 7b 70 61 Data Ascii: =Bt;break;case 4:a=$t;break;default:a=Gt}n=a.bind(null,t,n,e),a=void 0,!Re\|\|"touchstart"!==t&&"touchmove"!==t&&"wheel"!==t\|\|(a=!0),r?void 0!==a?e.addEventListener(t,n,{capture:!0,passive:a}):e.addEventListener(t,n,!0):void 0!==a?e.addEventListener(t,n,{pa
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 28 65 3d 65 2e 73 74 61 74 65 4e 6f 64 65 29 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 3f 65 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 28 72 2c 69 2c 6f 29 3a 21 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 21 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 75 72 65 52 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 7c 7c 28 21 75 72 28 6e 2c 72 29 7c 7c 21 75 72 28 61 2c 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 69 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 21 31 2c 61 3d 43 61 2c 69 3d 74 2e 63 6f 6e 74 65 78 74 54 79 70 65 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 69 26 26 6e 75 6c 6c 21 3d 3d 69 3f 69 3d 45 69 28 69 29 3a 28 61 3d 4d 61 Data Ascii: function"===typeof(e=e.stateNode).shouldComponentUpdate?e.shouldComponentUpdate(r,i,o):!t.prototype\|\|!t.prototype.isPureReactComponent\|\|(!ur(n,r)\|\|!ur(a,i))}function Hi(e,t,n){var r=!1,a=Ca,i=t.contextType;return"object"===typeof i&&null!==i?i=Ei(i):(a=Ma
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 75 73 65 43 6f 6e 74 65 78 74 3a 45 69 2c 75 73 65 45 66 66 65 63 74 3a 56 6f 2c 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 6e 64 6c 65 3a 71 6f 2c 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 3a 42 6f 2c 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3a 24 6f 2c 75 73 65 4d 65 6d 6f 3a 5a 6f 2c 75 73 65 52 65 64 75 63 65 72 3a 44 6f 2c 75 73 65 52 65 66 3a 59 6f 2c 75 73 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 6f 28 4f 6f 29 7d 2c 75 73 65 44 65 62 75 67 56 61 6c 75 65 3a 51 6f 2c 75 73 65 44 65 66 65 72 72 65 64 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 6f 28 43 6f 28 29 2c 76 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 65 29 7d 2c 75 73 65 54 72 61 6e 73 69 74 69 6f Data Ascii: useContext:Ei,useEffect:Vo,useImperativeHandle:qo,useInsertionEffect:Bo,useLayoutEffect:$o,useMemo:Zo,useReducer:Do,useRef:Yo,useState:function(){return Do(Oo)},useDebugValue:Qo,useDeferredValue:function(e){return Jo(Co(),vo.memoizedState,e)},useTransitio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-20 02:24:25 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=51620 Date: Wed, 20 Nov 2024 02:24:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-20 02:24:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:26 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:26 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:26 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022426Z-1777c6cb754gvvgfhC1TEBz4rg00000008zg00000000fp0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:26 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-20 02:24:27 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:27 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:27 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022427Z-185f5d8b95cx9g8lhC1NYCtgvc0000000200000000007u64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:27 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:27 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022427Z-1777c6cb7544n7p6hC1TEByvb4000000093g00000000a9ya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:27 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:28 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022427Z-1777c6cb754mqztshC1TEB4mkc00000009300000000021un x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:27 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:27 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022427Z-1777c6cb754dqb2khC1TEBmk1s00000008ug00000000pnhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:27 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:28 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: d9470d89-501e-0047-17f3-3ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022428Z-185f5d8b95c9mqtvhC1NYCghtc00000009pg00000000eeax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:28 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:28 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022428Z-r1d97b99577ckpmjhC1TEBrzs0000000088g000000009w5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:28 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:28 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022428Z-1777c6cb754b7tdghC1TEBwwa4000000090g00000000hh09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:28 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:28 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022428Z-185f5d8b95cdcwrthC1NYCy5b800000009q00000000006q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:28 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:28 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022428Z-1777c6cb7544n7p6hC1TEByvb4000000091000000000k9fr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:28 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:28 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:28 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022428Z-1777c6cb7549x5qchC1TEBggbg00000008wg00000000t89s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:28 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:29 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:29 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022429Z-1777c6cb7549x5qchC1TEBggbg00000008zg00000000f5mb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:29 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022429Z-185f5d8b95c4hl5whC1NYCeex000000009gg00000000ex17 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:29 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022429Z-r1d97b99577kk29chC1TEBemmg000000086000000000hxd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:29 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:29 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022429Z-185f5d8b95c68cvnhC1NYCfn7s00000009p00000000068qd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:29 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022429Z-r1d97b995777mdbwhC1TEBezag000000084g00000000g8cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:30 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022430Z-1777c6cb754b7tdghC1TEBwwa400000008zg00000000nx54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:30 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022430Z-1777c6cb7544n7p6hC1TEByvb40000000950000000005hf6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022430Z-1777c6cb754j47wfhC1TEB5wrw00000004q000000000p9cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022430Z-r1d97b99577ndm4rhC1TEBf0ps000000089000000000fews x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:30 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022430Z-185f5d8b95c68cvnhC1NYCfn7s00000009kg00000000h0xr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49741	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	611	OUT	GET /wlogo.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:32 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 22 Apr 2022 04:33:57 GMT Accept-Ranges: bytes ETag: "46f84a2e256d81:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:23 GMT Connection: close Content-Length: 33846
2024-11-20 02:24:32 UTC	16117	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 20 00 49 44 41 54 78 9c ec 7d 07 78 5c c5 d5 f6 7b ef dd 5e d5 bb 64 d9 72 ef bd 62 6c b0 0d b6 31 a6 13 c0 84 1e 4a 08 01 42 4f 68 09 09 01 c2 17 12 42 42 48 80 14 7a ef 98 0e 36 b6 c1 bd 77 e3 a2 de 56 da de 6e 99 ff 39 b3 bb b2 6c 49 b6 25 ad 5c f2 ef ab 67 1f ed de 32 77 ee cc 9c 36 73 ce 19 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 07 10 da 3f 0c 9c ff 72 79 9b 63 c7 0a 89 4a 8a 00 18 00 ad d5 6f c4 7f 0b f1 df fc 1c 63 80 20 f0 ef 62 fc a3 b6 aa 3b 6b 55 56 Data Ascii: PNGIHDRX IDATx}x\{^drbl1JBOhBBHz6wVn9lI%\g2w6sB)B)B)B)B)B)B)B)B)B)B)B)B)B)B)B?rycJoc b;kUV
2024-11-20 02:24:32 UTC	16384	IN	Data Raw: af c5 73 cf 3d 87 37 de 78 03 d9 d9 07 ee 60 34 62 c4 08 ce 89 fe f3 9f ff 60 ca 94 29 38 f7 dc 73 f1 f6 db 6f 73 ae 37 7a f4 68 2e d9 4e 3b ed 34 3c f8 e0 83 5c 12 91 3a 76 ea a9 a7 e2 cc 33 cf c4 3b ef bc 83 d7 5e 7b 8d 97 4b 1c fd a7 3f fd 29 b6 6d db 06 a7 d3 89 5f ff fa d7 b0 5a 63 f1 f2 f4 fd 8c 33 ce c0 b8 71 e3 f8 3b d0 7b 91 fa 40 cf 48 70 6a aa 33 71 bc cf 3f ff 1c 23 47 8e e4 f7 50 bb bc f8 e2 8b d8 bc 79 33 ce 39 e7 1c fc e4 27 3f c1 15 57 5c c1 b9 ff d0 a1 43 d1 bf 7f 7f 2e 01 88 9b d3 7f 3a 96 40 af 5e bd b8 74 22 e9 40 aa 16 a9 50 ad b9 a8 5e af 3f 40 a5 3a e9 a4 93 90 97 97 87 0f 3e f8 80 4b 8b fb ee bb 8f b7 df e4 c9 93 f9 bb 6f da b4 09 ff fa d7 bf 38 57 a7 7a 13 97 a7 77 79 e8 a1 87 f0 f2 cb 2f e3 c3 0f 3f e4 ef 4d bf e9 9e c7 1f 7f 1c Data Ascii: s=7x`4b`)8sos7zh.N;4<\:v3;^{K?)m_Zc3q;{@Hpj3q?#GPy39'?W\C.:@^t"@P^?@:>Ko8Wzwy/?M
2024-11-20 02:24:32 UTC	1345	IN	Data Raw: cb 5d 6c 8a eb 78 af 3e 81 f7 0f 24 b1 af 53 41 46 d1 e0 94 c4 f5 6e 07 ff 07 9b c8 ff c3 30 cd 00 7a 10 47 0f 1b c8 c7 80 8f c2 40 b8 dc ef 5a c1 a7 39 36 ad 9a 57 26 15 fd c6 8c 8a 49 76 99 67 ca b4 33 aa 6c 58 34 d2 85 69 25 76 a6 b6 d4 13 c4 2e de 92 54 b0 bf cb da a1 77 76 64 d1 44 9c b8 8c 98 41 83 44 1d b6 c4 c9 6b 17 19 5d 69 b9 4b 82 df 29 32 26 13 62 6c f4 db 00 8f cc c3 61 13 58 ca 94 9a 11 6d 92 f5 b9 f3 9f 99 e6 d0 19 2b 8a 46 0c 27 26 8b 11 22 69 03 61 d5 40 28 a1 21 9c 30 d9 2c 49 47 4a 43 38 9e 41 38 43 f2 d5 06 13 ed 77 c8 a4 66 2b 80 e2 ad 19 15 0e 26 56 3a 8a 14 af 9c bd d3 0d 44 05 b4 ae 25 83 35 8d 29 ec 08 64 d0 11 65 f3 ee 9a 53 e6 df 72 db f8 3f c9 3c b7 5c 33 11 c9 5f bb fc b5 1e 36 90 7f 03 03 c9 af 7b 52 56 e3 39 ae 4c d3 cd d3 Data Ascii: ]lx>$SAFn0zG@Z96W&Ivg3lX4i%v.TwvdDADk]iK)2&blaXm+F'&"ia@(!0,IGJC8A8Cwf+&V:D%5)deSr?<\3_6{RV9L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49742	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	620	OUT	GET /ebill/appStore.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:32 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "ba6480cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:23 GMT Connection: close Content-Length: 7662
2024-11-20 02:24:32 UTC	7662	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 61 08 06 00 00 00 39 ad 7f 2d 00 00 1d b5 49 44 41 54 78 9c ed 9d 09 b4 8e c5 1f c7 c7 d6 42 fe 49 49 69 43 42 45 22 14 da 14 4a 76 d1 86 23 49 65 97 92 f6 93 a8 a4 28 64 97 14 9d a8 6b 69 55 94 3d 25 4b 64 bb f6 b5 50 a9 08 2d aa e7 7f 3e 73 de 79 cf bc f3 2c f7 bd f7 be db f5 ce f7 9c df 71 3d ef 3c f3 cc 33 cf cc 6f 7e 33 bf 4d 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 e4 7d e4 cb e2 0d 0a 45 51 c6 c2 c2 22 75 e1 08 21 8e f9 b5 ce 6b 72 9f 2d 84 68 21 84 68 20 84 a8 28 84 28 e2 2a 61 61 61 91 57 70 44 08 91 29 84 98 2d 84 98 21 84 d8 1b d4 ee 36 42 88 ad 21 ae 61 c9 92 a5 e3 8b b6 86 e6 78 18 05 b4 bf fb 08 21 46 0a 21 8a Data Ascii: PNGIHDRa9-IDATxBIIiCBE"Jv#Ie(dkiU=%KdP->sy,q=<3o~3MXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX}EQ"u!kr-h!h ((*aaaWpD)-!6B!ax!F!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49743	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:30 UTC	621	OUT	GET /ebill/playStore.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:32 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "8e57b0cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:23 GMT Connection: close Content-Length: 9365
2024-11-20 02:24:32 UTC	9365	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 5c 08 06 00 00 00 81 49 6b 5e 00 00 20 00 49 44 41 54 78 9c ed 5d 09 78 14 d5 1d ff cd cc 6e 12 08 47 08 84 08 28 81 88 82 96 1b 01 01 d1 62 2d 5e b4 68 0b d6 b6 5a eb 51 2d 4a d1 1e 96 fa 15 5b cf d6 6a c5 8a d5 62 15 6d d5 6a a9 28 37 a8 1c 8a 1c 12 6e 41 6e 39 04 b9 03 e4 0e 21 bb fb fa fd de cc 5b 66 77 76 73 b1 40 48 de ef fb 1e 1b 76 df ce be 39 fe f7 f1 a0 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 51 47 61 54 72 5a fe 2a cc d1 d0 d0 a8 bd 10 00 ca e3 ad 2e 16 71 b7 02 70 23 80 c1 00 3a 01 48 f5 cc d0 d0 d0 38 5b 50 0c 60 13 80 8f 00 4c 06 b0 af a2 75 ff 18 c0 36 87 6b e8 a1 87 1e 75 6b 6c 73 68 3c 0c cb f5 f7 83 00 5e 02 90 ee 61 0b 1a 1a 1a 75 01 cd 1c ed Data Ascii: PNGIHDR\Ik^ IDATx]xnG(b-^hZQ-J[jbmj(7nAn9![fwvs@Hv9QGaTrZ*.qp#:H8[P`Lu6kuklsh<^au

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:31 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:31 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022431Z-r1d97b99577d6qrbhC1TEBux5s000000087000000000qukv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:31 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022431Z-r1d97b99577tssmjhC1TEB8kan0000000860000000004vwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:31 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022431Z-1777c6cb7544n7p6hC1TEByvb4000000091g00000000gy73 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:31 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022431Z-185f5d8b95crl6swhC1NYC3ueg00000009s000000000d2hu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:32 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:31 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022431Z-1777c6cb754mqztshC1TEB4mkc0000000910000000008dkv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:32 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49748	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:32 UTC	374	OUT	GET /ebill/static/js/main.dd47d300.js HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:33 UTC	281	IN	HTTP/1.1 200 OK Content-Type: application/javascript Last-Modified: Wed, 08 Nov 2023 05:31:17 GMT Accept-Ranges: bytes ETag: "dddfd8cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:25 GMT Connection: close Content-Length: 267320
2024-11-20 02:24:33 UTC	16103	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 64 64 34 37 64 33 30 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 65 3d 6e 2e 6e 6d 64 28 65 29 29 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 Data Ascii: /! For license information please see main.dd47d300.js.LICENSE.txt /!function(){var e={426:function(e,t,n){(e=n.nmd(e)).exports=function(){"use strict";var t,n;function r(){return t.apply(null,arguments)}function a(e){t=e}function i(e){return e instanc
2024-11-20 02:24:33 UTC	16384	IN	Data Raw: 21 3d 61 3f 74 2e 64 3d 61 3a 76 28 6e 29 2e 69 6e 76 61 6c 69 64 57 65 65 6b 64 61 79 3d 65 7d 29 29 2c 59 65 28 5b 22 64 22 2c 22 65 22 2c 22 45 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 74 5b 72 5d 3d 63 65 28 65 29 7d 29 29 3b 76 61 72 20 52 74 3d 22 53 75 6e 64 61 79 5f 4d 6f 6e 64 61 79 5f 54 75 65 73 64 61 79 5f 57 65 64 6e 65 73 64 61 79 5f 54 68 75 72 73 64 61 79 5f 46 72 69 64 61 79 5f 53 61 74 75 72 64 61 79 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 6a 74 3d 22 53 75 6e 5f 4d 6f 6e 5f 54 75 65 5f 57 65 64 5f 54 68 75 5f 46 72 69 5f 53 61 74 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 4c 74 3d 22 53 75 5f 4d 6f 5f 54 75 5f 57 65 5f 54 68 5f 46 72 5f 53 61 22 2e 73 70 6c 69 74 28 22 5f 22 29 2c 46 74 3d 52 65 2c 41 74 3d 52 65 2c Data Ascii: !=a?t.d=a:v(n).invalidWeekday=e})),Ye(["d","e","E"],(function(e,t,n,r){t[r]=ce(e)}));var Rt="Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),jt="Sun_Mon_Tue_Wed_Thu_Fri_Sat".split("_"),Lt="Su_Mo_Tu_We_Th_Fr_Sa".split("_"),Ft=Re,At=Re,
2024-11-20 02:24:33 UTC	16384	IN	Data Raw: 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 58 6e 28 29 7b 72 65 74 75 72 6e 20 4a 6e 28 22 69 73 42 65 66 6f 72 65 22 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 72 28 29 7b 72 65 74 75 72 6e 20 4a 6e 28 22 69 73 41 66 74 65 72 22 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 29 7d 76 61 72 20 74 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 61 74 65 2e 6e 6f 77 3f 44 61 74 65 2e 6e 6f 77 28 29 3a 2b 6e 65 77 20 44 61 74 65 7d 2c 6e 72 3d 5b 22 79 65 61 72 22 2c 22 71 75 61 72 74 65 72 22 2c 22 6d 6f 6e 74 68 22 2c 22 77 65 65 6b 22 2c 22 64 61 79 22 2c 22 68 6f 75 72 22 2c 22 6d 69 6e 75 74 65 22 2c 22 Data Ascii: t[r]);return n}function Xn(){return Jn("isBefore",[].slice.call(arguments,0))}function er(){return Jn("isAfter",[].slice.call(arguments,0))}var tr=function(){return Date.now?Date.now():+new Date},nr=["year","quarter","month","week","day","hour","minute","
2024-11-20 02:24:33 UTC	16384	IN	Data Raw: 29 2c 7a 65 28 5b 22 79 22 2c 22 79 79 22 2c 22 79 79 79 22 2c 22 79 79 79 79 22 5d 2c 48 65 29 2c 7a 65 28 5b 22 79 6f 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3b 6e 2e 5f 6c 6f 63 61 6c 65 2e 5f 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 52 65 67 65 78 26 26 28 61 3d 65 2e 6d 61 74 63 68 28 6e 2e 5f 6c 6f 63 61 6c 65 2e 5f 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 52 65 67 65 78 29 29 2c 6e 2e 5f 6c 6f 63 61 6c 65 2e 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 50 61 72 73 65 3f 74 5b 48 65 5d 3d 6e 2e 5f 6c 6f 63 61 6c 65 2e 65 72 61 59 65 61 72 4f 72 64 69 6e 61 6c 50 61 72 73 65 28 65 2c 61 29 3a 74 5b 48 65 5d 3d 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 29 29 2c 59 28 30 2c 5b 22 67 67 22 2c 32 5d 2c 30 2c 28 Data Ascii: ),ze(["y","yy","yyy","yyyy"],He),ze(["yo"],(function(e,t,n,r){var a;n._locale._eraYearOrdinalRegex&&(a=e.match(n._locale._eraYearOrdinalRegex)),n._locale.eraYearOrdinalParse?t[He]=n._locale.eraYearOrdinalParse(e,a):t[He]=parseInt(e,10)})),Y(0,["gg",2],0,(
2024-11-20 02:24:34 UTC	16384	IN	Data Raw: 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 79 2c 67 29 3b 76 5b 74 5d 3d 6e 65 77 20 6d 28 74 2c 31 2c 21 31 2c 65 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 78 6d 6c 3a 62 61 73 65 22 2c 22 78 6d 6c 3a 6c 61 6e 67 22 2c 22 78 6d 6c 3a 73 70 61 63 65 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 79 2c 67 29 3b 76 5b 74 5d 3d 6e 65 77 20 6d 28 74 2c 31 2c 21 31 2c 65 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 Data Ascii: {var t=e.replace(y,g);v[t]=new m(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(y,g);v[t]=new m(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"
2024-11-20 02:24:34 UTC	16384	IN	Data Raw: 73 74 65 6d 46 6c 61 67 73 3a 72 2c 6e 61 74 69 76 65 45 76 65 6e 74 3a 69 2c 74 61 72 67 65 74 43 6f 6e 74 61 69 6e 65 72 73 3a 5b 61 5d 7d 2c 6e 75 6c 6c 21 3d 3d 74 26 26 28 6e 75 6c 6c 21 3d 3d 28 74 3d 62 61 28 74 29 29 26 26 6b 74 28 74 29 29 2c 65 29 3a 28 65 2e 65 76 65 6e 74 53 79 73 74 65 6d 46 6c 61 67 73 7c 3d 72 2c 74 3d 65 2e 74 61 72 67 65 74 43 6f 6e 74 61 69 6e 65 72 73 2c 6e 75 6c 6c 21 3d 3d 61 26 26 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 61 29 26 26 74 2e 70 75 73 68 28 61 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 65 29 7b 76 61 72 20 74 3d 67 61 28 65 2e 74 61 72 67 65 74 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 7b 76 61 72 20 6e 3d 57 65 28 74 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 69 66 28 31 33 3d 3d 3d 28 74 3d Data Ascii: stemFlags:r,nativeEvent:i,targetContainers:[a]},null!==t&&(null!==(t=ba(t))&&kt(t)),e):(e.eventSystemFlags\|=r,t=e.targetContainers,null!==a&&-1===t.indexOf(a)&&t.push(a),e)}function At(e){var t=ga(e.target);if(null!==t){var n=We(t);if(null!==n)if(13===(t=
2024-11-20 02:24:34 UTC	16384	IN	Data Raw: 53 74 72 69 6e 67 28 33 36 29 2e 73 6c 69 63 65 28 32 29 3b 66 75 6e 63 74 69 6f 6e 20 57 72 28 65 29 7b 69 66 28 21 65 5b 49 72 5d 29 7b 65 5b 49 72 5d 3d 21 30 2c 6f 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 21 3d 3d 74 26 26 28 46 72 2e 68 61 73 28 74 29 7c 7c 59 72 28 74 2c 21 31 2c 65 29 2c 59 72 28 74 2c 21 30 2c 65 29 29 7d 29 29 3b 76 61 72 20 74 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 3a 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 6e 75 6c 6c 3d 3d 3d 74 7c 7c 74 5b 49 72 5d 7c 7c 28 74 5b 49 72 5d 3d 21 30 2c 59 72 28 22 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 2c 21 31 2c 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 72 28 65 2c 74 2c 6e 2c 72 29 7b Data Ascii: String(36).slice(2);function Wr(e){if(!e[Ir]){e[Ir]=!0,o.forEach((function(t){"selectionchange"!==t&&(Fr.has(t)\|\|Yr(t,!1,e),Yr(t,!0,e))}));var t=9===e.nodeType?e:e.ownerDocument;null===t\|\|t[Ir]\|\|(t[Ir]=!0,Yr("selectionchange",!1,t))}}function Hr(e,t,n,r){
2024-11-20 02:24:34 UTC	16384	IN	Data Raw: 6e 75 6c 6c 21 3d 3d 6e 26 26 28 69 2e 63 61 6c 6c 62 61 63 6b 3d 6e 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 6a 69 28 65 2c 69 2c 61 29 29 26 26 28 72 73 28 74 2c 65 2c 61 2c 72 29 2c 4c 69 28 74 2c 65 2c 61 29 29 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 65 2e 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 73 3b 76 61 72 20 6e 3d 74 73 28 29 2c 72 3d 6e 73 28 65 29 2c 61 3d 52 69 28 6e 2c 72 29 3b 61 2e 74 61 67 3d 32 2c 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 74 26 26 28 61 2e 63 61 6c 6c 62 61 63 6b 3d 74 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 6a 69 28 65 2c 61 2c 72 29 29 26 26 28 72 73 28 74 2c 65 2c 72 2c 6e 29 2c 4c 69 28 74 2c 65 2c 72 29 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e Data Ascii: null!==n&&(i.callback=n),null!==(t=ji(e,i,a))&&(rs(t,e,a,r),Li(t,e,a))},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=ts(),r=ns(e),a=Ri(n,r);a.tag=2,void 0!==t&&null!==t&&(a.callback=t),null!==(t=ji(e,a,r))&&(rs(t,e,r,n),Li(t,e,r))}};function
2024-11-20 02:24:34 UTC	16384	IN	Data Raw: 28 29 7b 76 61 72 20 65 3d 4e 6f 28 29 2c 74 3d 50 75 2e 69 64 65 6e 74 69 66 69 65 72 50 72 65 66 69 78 3b 69 66 28 61 69 29 7b 76 61 72 20 6e 3d 5a 61 3b 74 3d 22 3a 22 2b 74 2b 22 52 22 2b 28 6e 3d 28 4b 61 26 7e 28 31 3c 3c 33 32 2d 6f 74 28 4b 61 29 2d 31 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 2b 6e 29 2c 30 3c 28 6e 3d 77 6f 2b 2b 29 26 26 28 74 2b 3d 22 48 22 2b 6e 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 29 2c 74 2b 3d 22 3a 22 7d 65 6c 73 65 20 74 3d 22 3a 22 2b 74 2b 22 72 22 2b 28 6e 3d 5f 6f 2b 2b 29 2e 74 6f 53 74 72 69 6e 67 28 33 32 29 2b 22 3a 22 3b 72 65 74 75 72 6e 20 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 74 7d 2c 75 6e 73 74 61 62 6c 65 5f 69 73 4e 65 77 52 65 63 6f 6e 63 69 6c 65 72 3a 21 31 7d 2c 75 6c 3d 7b 72 65 61 64 Data Ascii: (){var e=No(),t=Pu.identifierPrefix;if(ai){var n=Za;t=":"+t+"R"+(n=(Ka&~(1<<32-ot(Ka)-1)).toString(32)+n),0<(n=wo++)&&(t+="H"+n.toString(32)),t+=":"}else t=":"+t+"r"+(n=_o++).toString(32)+":";return e.memoizedState=t},unstable_isNewReconciler:!1},ul={read
2024-11-20 02:24:35 UTC	16384	IN	Data Raw: 65 22 3d 3d 3d 6f 3f 76 65 28 65 2c 63 29 3a 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 6f 3f 6e 75 6c 6c 21 3d 28 63 3d 63 3f 63 2e 5f 5f 68 74 6d 6c 3a 76 6f 69 64 20 30 29 26 26 66 65 28 65 2c 63 29 3a 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 6f 3f 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 63 3f 28 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6e 7c 7c 22 22 21 3d 3d 63 29 26 26 64 65 28 65 2c 63 29 3a 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 64 65 28 65 2c 22 22 2b 63 29 3a 22 73 75 70 70 72 65 73 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 57 61 72 6e 69 6e 67 22 21 3d 3d 6f 26 26 22 73 75 70 70 72 65 73 73 48 79 64 72 61 74 69 6f 6e 57 61 72 6e 69 6e 67 22 21 3d 3d 6f 26 26 22 61 Data Ascii: e"===o?ve(e,c):"dangerouslySetInnerHTML"===o?null!=(c=c?c.__html:void 0)&&fe(e,c):"children"===o?"string"===typeof c?("textarea"!==n\|\|""!==c)&&de(e,c):"number"===typeof c&&de(e,""+c):"suppressContentEditableWarning"!==o&&"suppressHydrationWarning"!==o&&"a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49746	124.43.145.124	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:32 UTC	574	OUT	OPTIONS /OnlineBilling/Master/Link_Data_Temp HTTP/1.1 Host: billing.waterboard.lk Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: access-control-allow-origin,content-type Origin: https://ebis.waterboard.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://ebis.waterboard.lk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:33 UTC	274	IN	HTTP/1.1 204 No Content Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: access-control-allow-origin,content-type Access-Control-Allow-Methods: POST X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-185f5d8b95ctl8xlhC1NYCn94g00000009pg00000000evpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-1777c6cb754j47wfhC1TEB5wrw00000004vg000000004tz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-1777c6cb754mrj2shC1TEB6k7w00000008z000000000t6d8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-185f5d8b95cf7qddhC1NYC66an00000009p000000000dr45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-r1d97b99577gg97qhC1TEBcrf4000000084g000000002r9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49747	124.43.145.124	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	704	OUT	POST /OnlineBilling/Master/Link_Data_Temp HTTP/1.1 Host: billing.waterboard.lk Connection: keep-alive Content-Length: 28 Access-Control-Allow-Origin: * Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ebis.waterboard.lk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebis.waterboard.lk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:33 UTC	28	OUT	Data Raw: 7b 22 69 64 65 6e 74 69 74 79 4b 65 79 22 3a 22 6f 54 6f 64 4b 71 34 49 33 51 22 7d Data Ascii: {"identityKey":"oTodKq4I3Q"}
2024-11-20 02:24:33 UTC	233	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:32 GMT Connection: close
2024-11-20 02:24:33 UTC	427	IN	Data Raw: 31 61 34 0d 0a 7b 22 6d 6f 62 69 6c 65 4e 6f 22 3a 22 22 2c 22 65 6d 61 69 6c 41 64 64 72 65 73 73 22 3a 22 22 2c 22 61 63 63 6f 75 6e 74 4e 6f 22 3a 22 31 30 2f 31 34 2f 31 39 30 2f 33 34 37 2f 31 31 22 2c 22 62 69 6c 6c 59 65 61 72 22 3a 22 32 30 32 34 22 2c 22 62 69 6c 6c 4d 6f 6e 74 68 22 3a 22 31 31 22 2c 22 63 75 72 72 65 6e 74 44 61 74 65 22 3a 22 31 31 2f 31 39 2f 32 30 32 34 20 33 3a 32 33 3a 34 35 20 50 4d 22 2c 22 63 75 72 72 65 6e 74 4d 6f 6e 74 68 43 68 61 72 67 65 22 3a 22 31 35 37 36 2e 36 31 30 30 22 2c 22 74 6f 74 61 6c 44 75 65 22 3a 22 38 33 35 35 2e 34 38 30 30 22 2c 22 63 75 72 72 65 6e 74 43 6f 6e 73 75 6d 70 74 69 6f 6e 22 3a 22 35 22 2c 22 6e 61 6d 65 22 3a 22 4d 72 53 2e 48 2e 4d 5a 49 59 41 52 44 22 2c 22 61 64 64 72 65 73 73 31 Data Ascii: 1a4{"mobileNo":"","emailAddress":"","accountNo":"10/14/190/347/11","billYear":"2024","billMonth":"11","currentDate":"11/19/2024 3:23:45 PM","currentMonthCharge":"1576.6100","totalDue":"8355.4800","currentConsumption":"5","name":"MrS.H.MZIYARD","address1
2024-11-20 02:24:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49754	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bbRv+efyhxeC9Ws&MD=hTezEZXL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-20 02:24:33 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 348e3faa-2e1a-4166-b582-c662499b0c42 MS-RequestId: be6a6f53-9dc5-493d-8e39-b0bbf87dd7a5 MS-CV: eSR4t0DO8k+LDKq4.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 20 Nov 2024 02:24:32 GMT Connection: close Content-Length: 24490
2024-11-20 02:24:33 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-20 02:24:33 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49763	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	619	OUT	GET /ebill/favicon.ico HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:34 UTC	270	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "731591cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:26 GMT Connection: close Content-Length: 31438
2024-11-20 02:24:34 UTC	16114	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 da 00 00 00 d7 08 06 00 00 00 7c 83 4f 05 00 00 20 00 49 44 41 54 78 9c ec 9d 77 78 5c d5 99 ff 3f e7 d6 e9 d2 48 1a 49 56 b1 2c 4b 96 7b c1 0d 9b 66 03 36 10 20 85 9e 25 09 04 92 4d 36 09 49 36 d9 cd 66 9f 64 b3 3f b2 59 92 0d 29 a4 b7 4d 42 d8 24 04 08 81 40 12 42 b1 01 83 8d 8d 0b c6 bd 4a b6 65 49 56 d7 68 fa cc 2d e7 f7 c7 c8 c6 14 03 96 e4 02 cc e7 79 ee 23 dd 99 3b e7 9e 5b be a7 bc e7 3d ef 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 Data Ascii: PNGIHDR\|O IDATxwx\?HIV,K{f6 %M6I6fd?Y)MB$@BJeIVh-y#;[=(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@
2024-11-20 02:24:34 UTC	15324	IN	Data Raw: a6 58 2c 8e 1c e5 72 19 c7 71 78 ee b9 e7 68 6c 6c 64 c5 8a 15 ec de bd 9b f6 f6 76 1c c7 e1 9f ff f9 9f b9 e9 a6 9b 90 52 b2 64 c9 12 84 10 5c 70 c1 05 a8 aa 7a c8 8a e3 ba 2e 6b d6 ac e1 81 07 1e e0 b6 db 6e a3 a1 a1 81 0b 2f bc 90 bb ef be 9b 3b ef bc 93 1f fe f0 87 34 34 34 b0 7f ff 7e ce 3f ff 7c 52 a9 14 e9 74 1a c7 71 48 26 93 4c 9c 38 91 40 20 c0 57 bf fa d5 91 89 54 d7 8f cd d8 a8 63 46 d0 22 91 08 33 66 cc 40 d7 75 1a 1a 1a f8 87 7f f8 07 6a 6b 6b f9 f4 a7 3f 8d e3 38 7c e5 2b 5f e1 f8 e3 8f 27 91 48 70 f6 d9 67 f3 c8 23 8f a0 28 0a 4b 97 2e e5 9b df fc 26 b7 df 7e 3b b7 dd 76 1b df fd ee 77 99 3f 7f 3e e3 c7 8f 47 d7 75 5a 5b 5b 39 eb ac b3 b8 f2 ca 2b f9 e2 17 bf 48 b1 58 64 f1 e2 c5 34 36 36 32 69 d2 a4 91 f3 0b 21 38 ed b4 d3 38 f9 e4 93 69 Data Ascii: X,rqxhlldvRd\pz.kn/;444~?\|RtqH&L8@ WTcF"3f@ujkk?8\|+_'Hpg#(K.&~;vw?>GuZ[[9+HXd4662i!88i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49760	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	360	OUT	GET /ebill/appStore.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:34 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "ba6480cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:26 GMT Connection: close Content-Length: 7662
2024-11-20 02:24:34 UTC	7662	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 61 08 06 00 00 00 39 ad 7f 2d 00 00 1d b5 49 44 41 54 78 9c ed 9d 09 b4 8e c5 1f c7 c7 d6 42 fe 49 49 69 43 42 45 22 14 da 14 4a 76 d1 86 23 49 65 97 92 f6 93 a8 a4 28 64 97 14 9d a8 6b 69 55 94 3d 25 4b 64 bb f6 b5 50 a9 08 2d aa e7 7f 3e 73 de 79 cf bc f3 2c f7 bd f7 be db f5 ce f7 9c df 71 3d ef 3c f3 cc 33 cf cc 6f 7e 33 bf 4d 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 e4 7d e4 cb e2 0d 0a 45 51 c6 c2 c2 22 75 e1 08 21 8e f9 b5 ce 6b 72 9f 2d 84 68 21 84 68 20 84 a8 28 84 28 e2 2a 61 61 61 91 57 70 44 08 91 29 84 98 2d 84 98 21 84 d8 1b d4 ee 36 42 88 ad 21 ae 61 c9 92 a5 e3 8b b6 86 e6 78 18 05 b4 bf fb 08 21 46 0a 21 8a Data Ascii: PNGIHDRa9-IDATxBIIiCBE"Jv#Ie(dkiU=%KdP->sy,q=<3o~3MXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX}EQ"u!kr-h!h ((*aaaWpD)-!6B!ax!F!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49761	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	361	OUT	GET /ebill/playStore.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:34 UTC	266	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "8e57b0cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:26 GMT Connection: close Content-Length: 9365
2024-11-20 02:24:34 UTC	9365	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 5c 08 06 00 00 00 81 49 6b 5e 00 00 20 00 49 44 41 54 78 9c ed 5d 09 78 14 d5 1d ff cd cc 6e 12 08 47 08 84 08 28 81 88 82 96 1b 01 01 d1 62 2d 5e b4 68 0b d6 b6 5a eb 51 2d 4a d1 1e 96 fa 15 5b cf d6 6a c5 8a d5 62 15 6d d5 6a a9 28 37 a8 1c 8a 1c 12 6e 41 6e 39 04 b9 03 e4 0e 21 bb fb fa fd de cc 5b 66 77 76 73 b1 40 48 de ef fb 1e 1b 76 df ce be 39 fe f7 f1 a0 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 a1 51 47 61 54 72 5a fe 2a cc d1 d0 d0 a8 bd 10 00 ca e3 ad 2e 16 71 b7 02 70 23 80 c1 00 3a 01 48 f5 cc d0 d0 d0 38 5b 50 0c 60 13 80 8f 00 4c 06 b0 af a2 75 ff 18 c0 36 87 6b e8 a1 87 1e 75 6b 6c 73 68 3c 0c cb f5 f7 83 00 5e 02 90 ee 61 0b 1a 1a 1a 75 01 cd 1c ed Data Ascii: PNGIHDR\Ik^ IDATx]xnG(b-^hZQ-J[jbmj(7nAn9![fwvs@Hv9QGaTrZ*.qp#:H8[P`Lu6kuklsh<^au

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49762	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	560	OUT	GET /ebill/manifest.json HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:33 UTC	272	IN	HTTP/1.1 200 OK Content-Type: application/json Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "9b1ea9cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:26 GMT Connection: close Content-Length: 492
2024-11-20 02:24:33 UTC	492	IN	Data Raw: 7b 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 52 65 61 63 74 20 41 70 70 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 43 72 65 61 74 65 20 52 65 61 63 74 20 41 70 70 20 53 61 6d 70 6c 65 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 36 34 78 36 34 20 33 32 78 33 32 20 32 34 78 32 34 20 31 36 78 31 36 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 6c 6f 67 6f 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0a 20 Data Ascii: { "short_name": "React App", "name": "Create React App Sample", "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon" }, { "src": "logo192.png", "type": "image/png",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49764	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	351	OUT	GET /wlogo.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:34 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Fri, 22 Apr 2022 04:33:57 GMT Accept-Ranges: bytes ETag: "46f84a2e256d81:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:26 GMT Connection: close Content-Length: 33846
2024-11-20 02:24:34 UTC	16117	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 20 00 49 44 41 54 78 9c ec 7d 07 78 5c c5 d5 f6 7b ef dd 5e d5 bb 64 d9 72 ef bd 62 6c b0 0d b6 31 a6 13 c0 84 1e 4a 08 01 42 4f 68 09 09 01 c2 17 12 42 42 48 80 14 7a ef 98 0e 36 b6 c1 bd 77 e3 a2 de 56 da de 6e 99 ff 39 b3 bb b2 6c 49 b6 25 ad 5c f2 ef ab 67 1f ed de 32 77 ee cc 9c 36 73 ce 19 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 0a 29 a4 90 42 07 10 da 3f 0c 9c ff 72 79 9b 63 c7 0a 89 4a 8a 00 18 00 ad d5 6f c4 7f 0b f1 df fc 1c 63 80 20 f0 ef 62 fc a3 b6 aa 3b 6b 55 56 Data Ascii: PNGIHDRX IDATx}x\{^drbl1JBOhBBHz6wVn9lI%\g2w6sB)B)B)B)B)B)B)B)B)B)B)B)B)B)B)B?rycJoc b;kUV
2024-11-20 02:24:34 UTC	16384	IN	Data Raw: af c5 73 cf 3d 87 37 de 78 03 d9 d9 07 ee 60 34 62 c4 08 ce 89 fe f3 9f ff 60 ca 94 29 38 f7 dc 73 f1 f6 db 6f 73 ae 37 7a f4 68 2e d9 4e 3b ed 34 3c f8 e0 83 5c 12 91 3a 76 ea a9 a7 e2 cc 33 cf c4 3b ef bc 83 d7 5e 7b 8d 97 4b 1c fd a7 3f fd 29 b6 6d db 06 a7 d3 89 5f ff fa d7 b0 5a 63 f1 f2 f4 fd 8c 33 ce c0 b8 71 e3 f8 3b d0 7b 91 fa 40 cf 48 70 6a aa 33 71 bc cf 3f ff 1c 23 47 8e e4 f7 50 bb bc f8 e2 8b d8 bc 79 33 ce 39 e7 1c fc e4 27 3f c1 15 57 5c c1 b9 ff d0 a1 43 d1 bf 7f 7f 2e 01 88 9b d3 7f 3a 96 40 af 5e bd b8 74 22 e9 40 aa 16 a9 50 ad b9 a8 5e af 3f 40 a5 3a e9 a4 93 90 97 97 87 0f 3e f8 80 4b 8b fb ee bb 8f b7 df e4 c9 93 f9 bb 6f da b4 09 ff fa d7 bf 38 57 a7 7a 13 97 a7 77 79 e8 a1 87 f0 f2 cb 2f e3 c3 0f 3f e4 ef 4d bf e9 9e c7 1f 7f 1c Data Ascii: s=7x`4b`)8sos7zh.N;4<\:v3;^{K?)m_Zc3q;{@Hpj3q?#GPy39'?W\C.:@^t"@P^?@:>Ko8Wzwy/?M
2024-11-20 02:24:34 UTC	1345	IN	Data Raw: cb 5d 6c 8a eb 78 af 3e 81 f7 0f 24 b1 af 53 41 46 d1 e0 94 c4 f5 6e 07 ff 07 9b c8 ff c3 30 cd 00 7a 10 47 0f 1b c8 c7 80 8f c2 40 b8 dc ef 5a c1 a7 39 36 ad 9a 57 26 15 fd c6 8c 8a 49 76 99 67 ca b4 33 aa 6c 58 34 d2 85 69 25 76 a6 b6 d4 13 c4 2e de 92 54 b0 bf cb da a1 77 76 64 d1 44 9c b8 8c 98 41 83 44 1d b6 c4 c9 6b 17 19 5d 69 b9 4b 82 df 29 32 26 13 62 6c f4 db 00 8f cc c3 61 13 58 ca 94 9a 11 6d 92 f5 b9 f3 9f 99 e6 d0 19 2b 8a 46 0c 27 26 8b 11 22 69 03 61 d5 40 28 a1 21 9c 30 d9 2c 49 47 4a 43 38 9e 41 38 43 f2 d5 06 13 ed 77 c8 a4 66 2b 80 e2 ad 19 15 0e 26 56 3a 8a 14 af 9c bd d3 0d 44 05 b4 ae 25 83 35 8d 29 ec 08 64 d0 11 65 f3 ee 9a 53 e6 df 72 db f8 3f c9 3c b7 5c 33 11 c9 5f bb fc b5 1e 36 90 7f 03 03 c9 af 7b 52 56 e3 39 ae 4c d3 cd d3 Data Ascii: ]lx>$SAFn0zG@Z96W&Ivg3lX4i%v.TwvdDADk]iK)2&blaXm+F'&"ia@(!0,IGJC8A8Cwf+&V:D%5)deSr?<\3_6{RV9L

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-185f5d8b95cwtv72hC1NYC141w00000009d000000000y5qe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-185f5d8b95csp6jmhC1NYCwy6s00000009hg00000000dnh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-1777c6cb754j47wfhC1TEB5wrw00000004u000000000b9n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-r1d97b9957747b9jhC1TEBgyec000000089000000000frtf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:33 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:33 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022433Z-r1d97b99577n5jhbhC1TEB74vn000000084g00000000dzer x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:34 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:34 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:34 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022434Z-r1d97b99577kk29chC1TEBemmg000000086g00000000h94m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:34 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:34 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:34 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022434Z-1777c6cb754vxwc9hC1TEBykgw00000008z000000000a0dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:34 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022434Z-185f5d8b95crl6swhC1NYC3ueg00000009pg00000000r1p0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:34 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:34 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022434Z-185f5d8b95c68cvnhC1NYCfn7s00000009f000000000yaau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:34 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:34 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:34 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b0c2e714-101e-000b-0df2-3a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022434Z-185f5d8b95c4bhwphC1NYCs8gw00000009mg00000000upsr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:34 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49776	124.43.145.124	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:34 UTC	380	OUT	GET /OnlineBilling/Master/Link_Data_Temp HTTP/1.1 Host: billing.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:35 UTC	183	IN	HTTP/1.1 405 Method Not Allowed Transfer-Encoding: chunked Allow: POST Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:34 GMT Connection: close
2024-11-20 02:24:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49781	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:34 UTC	619	OUT	GET /ebill/logo192.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:35 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "37959fcb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:28 GMT Connection: close Content-Length: 31438
2024-11-20 02:24:35 UTC	16117	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 da 00 00 00 d7 08 06 00 00 00 7c 83 4f 05 00 00 20 00 49 44 41 54 78 9c ec 9d 77 78 5c d5 99 ff 3f e7 d6 e9 d2 48 1a 49 56 b1 2c 4b 96 7b c1 0d 9b 66 03 36 10 20 85 9e 25 09 04 92 4d 36 09 49 36 d9 cd 66 9f 64 b3 3f b2 59 92 0d 29 a4 b7 4d 42 d8 24 04 08 81 40 12 42 b1 01 83 8d 8d 0b c6 bd 4a b6 65 49 56 d7 68 fa cc 2d e7 f7 c7 c8 c6 14 03 96 e4 02 cc e7 79 ee 23 dd 99 3b e7 9e 5b be a7 bc e7 3d ef 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 Data Ascii: PNGIHDR\|O IDATxwx\?HIV,K{f6 %M6I6fd?Y)MB$@BJeIVh-y#;[=(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@
2024-11-20 02:24:36 UTC	15321	IN	Data Raw: 8e 1c e5 72 19 c7 71 78 ee b9 e7 68 6c 6c 64 c5 8a 15 ec de bd 9b f6 f6 76 1c c7 e1 9f ff f9 9f b9 e9 a6 9b 90 52 b2 64 c9 12 84 10 5c 70 c1 05 a8 aa 7a c8 8a e3 ba 2e 6b d6 ac e1 81 07 1e e0 b6 db 6e a3 a1 a1 81 0b 2f bc 90 bb ef be 9b 3b ef bc 93 1f fe f0 87 34 34 34 b0 7f ff 7e ce 3f ff 7c 52 a9 14 e9 74 1a c7 71 48 26 93 4c 9c 38 91 40 20 c0 57 bf fa d5 91 89 54 d7 8f cd d8 a8 63 46 d0 22 91 08 33 66 cc 40 d7 75 1a 1a 1a f8 87 7f f8 07 6a 6b 6b f9 f4 a7 3f 8d e3 38 7c e5 2b 5f e1 f8 e3 8f 27 91 48 70 f6 d9 67 f3 c8 23 8f a0 28 0a 4b 97 2e e5 9b df fc 26 b7 df 7e 3b b7 dd 76 1b df fd ee 77 99 3f 7f 3e e3 c7 8f 47 d7 75 5a 5b 5b 39 eb ac b3 b8 f2 ca 2b f9 e2 17 bf 48 b1 58 64 f1 e2 c5 34 36 36 32 69 d2 a4 91 f3 0b 21 38 ed b4 d3 38 f9 e4 93 69 6c 6c 24 Data Ascii: rqxhlldvRd\pz.kn/;444~?\|RtqH&L8@ WTcF"3f@ujkk?8\|+_'Hpg#(K.&~;vw?>GuZ[[9+HXd4662i!88ill$

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:35 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:35 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022435Z-1777c6cb754b7tdghC1TEBwwa400000009400000000080q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:35 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:35 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:35 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022435Z-185f5d8b95cwtv72hC1NYC141w00000009mg000000001chm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:35 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:35 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:35 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022435Z-1777c6cb7544n7p6hC1TEByvb400000008zg00000000rcx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:35 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49784	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:35 UTC	359	OUT	GET /ebill/favicon.ico HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:36 UTC	270	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "731591cb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:29 GMT Connection: close Content-Length: 31438
2024-11-20 02:24:36 UTC	16114	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 da 00 00 00 d7 08 06 00 00 00 7c 83 4f 05 00 00 20 00 49 44 41 54 78 9c ec 9d 77 78 5c d5 99 ff 3f e7 d6 e9 d2 48 1a 49 56 b1 2c 4b 96 7b c1 0d 9b 66 03 36 10 20 85 9e 25 09 04 92 4d 36 09 49 36 d9 cd 66 9f 64 b3 3f b2 59 92 0d 29 a4 b7 4d 42 d8 24 04 08 81 40 12 42 b1 01 83 8d 8d 0b c6 bd 4a b6 65 49 56 d7 68 fa cc 2d e7 f7 c7 c8 c6 14 03 96 e4 02 cc e7 79 ee 23 dd 99 3b e7 9e 5b be a7 bc e7 3d ef 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 Data Ascii: PNGIHDR\|O IDATxwx\?HIV,K{f6 %M6I6fd?Y)MB$@BJeIVh-y#;[=(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@
2024-11-20 02:24:36 UTC	15324	IN	Data Raw: a6 58 2c 8e 1c e5 72 19 c7 71 78 ee b9 e7 68 6c 6c 64 c5 8a 15 ec de bd 9b f6 f6 76 1c c7 e1 9f ff f9 9f b9 e9 a6 9b 90 52 b2 64 c9 12 84 10 5c 70 c1 05 a8 aa 7a c8 8a e3 ba 2e 6b d6 ac e1 81 07 1e e0 b6 db 6e a3 a1 a1 81 0b 2f bc 90 bb ef be 9b 3b ef bc 93 1f fe f0 87 34 34 34 b0 7f ff 7e ce 3f ff 7c 52 a9 14 e9 74 1a c7 71 48 26 93 4c 9c 38 91 40 20 c0 57 bf fa d5 91 89 54 d7 8f cd d8 a8 63 46 d0 22 91 08 33 66 cc 40 d7 75 1a 1a 1a f8 87 7f f8 07 6a 6b 6b f9 f4 a7 3f 8d e3 38 7c e5 2b 5f e1 f8 e3 8f 27 91 48 70 f6 d9 67 f3 c8 23 8f a0 28 0a 4b 97 2e e5 9b df fc 26 b7 df 7e 3b b7 dd 76 1b df fd ee 77 99 3f 7f 3e e3 c7 8f 47 d7 75 5a 5b 5b 39 eb ac b3 b8 f2 ca 2b f9 e2 17 bf 48 b1 58 64 f1 e2 c5 34 36 36 32 69 d2 a4 91 f3 0b 21 38 ed b4 d3 38 f9 e4 93 69 Data Ascii: X,rqxhlldvRd\pz.kn/;444~?\|RtqH&L8@ WTcF"3f@ujkk?8\|+_'Hpg#(K.&~;vw?>GuZ[[9+HXd4662i!88i

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:35 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022435Z-1777c6cb754lv4cqhC1TEB13us00000008z0000000008ztm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:35 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:35 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:35 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022435Z-185f5d8b95cqnkdjhC1NYCm8w800000009b000000000vh6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:35 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:36 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:36 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022436Z-185f5d8b95c4hl5whC1NYCeex000000009f000000000masa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:36 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:36 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022436Z-185f5d8b95crl6swhC1NYC3ueg00000009v00000000002en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:36 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022436Z-185f5d8b95cgrrn8hC1NYCgwh400000009c000000000ue57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:36 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022436Z-185f5d8b95crwqd8hC1NYCps6800000009pg0000000037bv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:36 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022436Z-185f5d8b95ckwnflhC1NYCx9qs00000009hg00000000uwfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:36 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-185f5d8b95c68cvnhC1NYCfn7s00000009k000000000msh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-1777c6cb7544n7p6hC1TEByvb40000000960000000001pgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-r1d97b99577sdxndhC1TEBec5n00000008e0000000001gcg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49795	124.43.162.133	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	359	OUT	GET /ebill/logo192.png HTTP/1.1 Host: ebis.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:37 UTC	267	IN	HTTP/1.1 200 OK Content-Type: image/png Last-Modified: Wed, 08 Nov 2023 05:31:16 GMT Accept-Ranges: bytes ETag: "37959fcb412da1:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:30 GMT Connection: close Content-Length: 31438
2024-11-20 02:24:37 UTC	16117	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 da 00 00 00 d7 08 06 00 00 00 7c 83 4f 05 00 00 20 00 49 44 41 54 78 9c ec 9d 77 78 5c d5 99 ff 3f e7 d6 e9 d2 48 1a 49 56 b1 2c 4b 96 7b c1 0d 9b 66 03 36 10 20 85 9e 25 09 04 92 4d 36 09 49 36 d9 cd 66 9f 64 b3 3f b2 59 92 0d 29 a4 b7 4d 42 d8 24 04 08 81 40 12 42 b1 01 83 8d 8d 0b c6 bd 4a b6 65 49 56 d7 68 fa cc 2d e7 f7 c7 c8 c6 14 03 96 e4 02 cc e7 79 ee 23 dd 99 3b e7 9e 5b be a7 bc e7 3d ef 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 0a 14 28 50 a0 40 81 02 05 Data Ascii: PNGIHDR\|O IDATxwx\?HIV,K{f6 %M6I6fd?Y)MB$@BJeIVh-y#;[=(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@(P@
2024-11-20 02:24:38 UTC	15321	IN	Data Raw: 8e 1c e5 72 19 c7 71 78 ee b9 e7 68 6c 6c 64 c5 8a 15 ec de bd 9b f6 f6 76 1c c7 e1 9f ff f9 9f b9 e9 a6 9b 90 52 b2 64 c9 12 84 10 5c 70 c1 05 a8 aa 7a c8 8a e3 ba 2e 6b d6 ac e1 81 07 1e e0 b6 db 6e a3 a1 a1 81 0b 2f bc 90 bb ef be 9b 3b ef bc 93 1f fe f0 87 34 34 34 b0 7f ff 7e ce 3f ff 7c 52 a9 14 e9 74 1a c7 71 48 26 93 4c 9c 38 91 40 20 c0 57 bf fa d5 91 89 54 d7 8f cd d8 a8 63 46 d0 22 91 08 33 66 cc 40 d7 75 1a 1a 1a f8 87 7f f8 07 6a 6b 6b f9 f4 a7 3f 8d e3 38 7c e5 2b 5f e1 f8 e3 8f 27 91 48 70 f6 d9 67 f3 c8 23 8f a0 28 0a 4b 97 2e e5 9b df fc 26 b7 df 7e 3b b7 dd 76 1b df fd ee 77 99 3f 7f 3e e3 c7 8f 47 d7 75 5a 5b 5b 39 eb ac b3 b8 f2 ca 2b f9 e2 17 bf 48 b1 58 64 f1 e2 c5 34 36 36 32 69 d2 a4 91 f3 0b 21 38 ed b4 d3 38 f9 e4 93 69 6c 6c 24 Data Ascii: rqxhlldvRd\pz.kn/;444~?\|RtqH&L8@ WTcF"3f@ujkk?8\|+_'Hpg#(K.&~;vw?>GuZ[[9+HXd4662i!88ill$

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-185f5d8b95cgrrn8hC1NYCgwh400000009eg00000000emmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-r1d97b995774n5h6hC1TEBvf84000000087g000000007pmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-1777c6cb7549x5qchC1TEBggbg000000092g0000000059xh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-1777c6cb754lv4cqhC1TEB13us0000000910000000002yk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-1777c6cb754xlpjshC1TEBv8cc000000093000000000dgrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-185f5d8b95cjbkr4hC1NYCeu2400000009d000000000m12x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:38 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:37 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:37 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022437Z-185f5d8b95c4vwv8hC1NYCy4v400000009q000000000mg77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:37 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:38 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022438Z-r1d97b99577n4dznhC1TEBc1qw00000008bg000000001syg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:38 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022438Z-1777c6cb754g9zd5hC1TEBfvpw000000093g000000009c8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:38 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:38 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022438Z-r1d97b99577sdxndhC1TEBec5n00000008b000000000ak6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:38 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:38 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:38 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022438Z-185f5d8b95crl6swhC1NYC3ueg00000009sg00000000a6fz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:38 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:38 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:38 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022438Z-185f5d8b95cgrrn8hC1NYCgwh400000009eg00000000empw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:38 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:39 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022439Z-1777c6cb754whff4hC1TEBcd6c00000007fg00000000r576 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:39 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:39 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022439Z-r1d97b99577hsvhhhC1TEByb1w00000002m0000000002t1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:39 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:39 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:39 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022439Z-r1d97b99577tssmjhC1TEB8kan000000085g000000005bck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:39 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:39 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:39 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022439Z-185f5d8b95c9mqtvhC1NYCghtc00000009qg000000009fzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:39 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:39 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:39 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022439Z-185f5d8b95c4vwv8hC1NYCy4v400000009sg000000009hsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:39 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022440Z-185f5d8b95c4hl5whC1NYCeex000000009kg000000006cr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022440Z-1777c6cb754g9zd5hC1TEBfvpw0000000940000000008mrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:40 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022440Z-1777c6cb754xjpthhC1TEBexs800000008q000000000rmc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:40 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022440Z-r1d97b99577d6qrbhC1TEBux5s00000008e0000000001uu1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:40 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022440Z-1777c6cb754rz2pghC1TEBghen00000008ug00000000gc1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:40 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:40 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:40 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: b992c0cc-401e-0048-5ef2-3a0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022440Z-r1d97b99577gg97qhC1TEBcrf400000007z000000000ksvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:40 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022440Z-185f5d8b95ctl8xlhC1NYCn94g00000009rg000000006df6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:40 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-185f5d8b95c96jn4hC1NYCbgp800000009g000000000wrrt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:41 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-185f5d8b95ctl8xlhC1NYCn94g00000009m000000000rmga x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:41 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c9ccbc18-001e-0014-5cf1-3a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-185f5d8b95c9mqtvhC1NYCghtc00000009mg00000000nrgy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:41 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-185f5d8b95c4vwv8hC1NYCy4v400000009ng00000000rt9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:41 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-1777c6cb754g9zd5hC1TEBfvpw000000095g000000002tkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:41 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-185f5d8b95c4vwv8hC1NYCy4v400000009v00000000000z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:41 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-185f5d8b95c5lcmhhC1NYCsnsw00000009r0000000007cxd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:41 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:41 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:41 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022441Z-185f5d8b95cx9g8lhC1NYCtgvc000000020g000000005xdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:41 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:42 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022442Z-1777c6cb7544n7p6hC1TEByvb4000000091000000000ka4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:42 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022442Z-r1d97b99577n5jhbhC1TEB74vn000000084g00000000dztt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:42 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:42 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022442Z-1777c6cb754j47wfhC1TEB5wrw00000004w0000000003hfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:42 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:42 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:42 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:42 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022442Z-185f5d8b95ckwnflhC1NYCx9qs00000009r0000000007dxy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:42 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:42 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:42 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:42 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022442Z-1777c6cb7544nvmshC1TEBf7qc00000008pg00000000qf3t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:42 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49834	124.43.145.124	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:42 UTC	576	OUT	OPTIONS /EbillViewer/Api/Metering/Ebill_Viewer HTTP/1.1 Host: billing.waterboard.lk Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: access-control-allow-origin,content-type Origin: https://ebis.waterboard.lk User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://ebis.waterboard.lk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:43 UTC	334	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: access-control-allow-origin,content-type X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:42 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:43 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:43 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022443Z-185f5d8b95cx9g8lhC1NYCtgvc00000001ug00000000xeqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:43 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:43 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:43 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:43 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022443Z-185f5d8b95cp7lkfhC1NYC7rpw00000009t0000000007rp1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:43 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:43 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:43 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022443Z-r1d97b995774n5h6hC1TEBvf84000000085000000000fn5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:43 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:43 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:43 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:43 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 072a5b9f-c01e-00a2-4bf3-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022443Z-r1d97b9957789g82hC1TEBstx0000000082000000000paem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-20 02:24:43 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:43 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:43 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022443Z-1777c6cb7549j9hhhC1TEBzmcc00000008tg00000000nseg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:43 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:43 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:43 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: ce1429b8-d01e-005a-2df1-3a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022443Z-185f5d8b95cgrrn8hC1NYCgwh400000009eg00000000emvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:44 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:44 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022444Z-185f5d8b95crl6swhC1NYC3ueg00000009v00000000002tf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:44 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:44 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:44 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022444Z-r1d97b99577jlrkbhC1TEBq8d0000000082g00000000ekcc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:44 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:44 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:44 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:44 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022444Z-185f5d8b95cmd8vfhC1NYC0g4000000005m0000000000d6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:44 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:44 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:44 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022444Z-185f5d8b95csd4bwhC1NYCq7dc00000009n00000000011bf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49843	124.43.145.124	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:44 UTC	706	OUT	POST /EbillViewer/Api/Metering/Ebill_Viewer HTTP/1.1 Host: billing.waterboard.lk Connection: keep-alive Content-Length: 28 Access-Control-Allow-Origin: * Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ebis.waterboard.lk Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ebis.waterboard.lk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:44 UTC	28	OUT	Data Raw: 7b 22 69 64 65 6e 74 69 74 79 4b 65 79 22 3a 22 6f 54 6f 64 4b 71 34 49 33 51 22 7d Data Ascii: {"identityKey":"oTodKq4I3Q"}
2024-11-20 02:24:46 UTC	310	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:45 GMT Connection: close Content-Length: 65
2024-11-20 02:24:46 UTC	65	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 62 69 6c 6c 69 6e 67 2e 77 61 74 65 72 62 6f 61 72 64 2e 6c 6b 2f 4f 6e 6c 69 6e 65 42 69 6c 6c 69 6e 67 45 6d 61 69 6c 2f 6f 54 6f 64 4b 71 34 49 33 51 2e 70 64 66 22 Data Ascii: "https://billing.waterboard.lk/OnlineBillingEmail/oTodKq4I3Q.pdf"

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:44 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:44 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022444Z-185f5d8b95c95vpshC1NYC759c00000009q00000000023cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:44 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:44 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022444Z-185f5d8b95cx9g8lhC1NYCtgvc000000020g000000005xn2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-1777c6cb754dqf99hC1TEB5nps00000008q000000000rgc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-185f5d8b95cdcwrthC1NYCy5b800000009pg000000002ahv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-185f5d8b95c96jn4hC1NYCbgp800000009q000000000217t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-185f5d8b95cmd8vfhC1NYC0g4000000005hg000000006g67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-185f5d8b95cf7qddhC1NYC66an00000009ng00000000h6rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-185f5d8b95cdcwrthC1NYCy5b800000009hg00000000k1c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-185f5d8b95cwtv72hC1NYC141w00000009kg0000000062ku x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:45 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:45 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022445Z-1777c6cb754j47wfhC1TEB5wrw00000004pg00000000rks7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:46 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022446Z-185f5d8b95c9mqtvhC1NYCghtc00000009hg00000000y96a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:46 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022446Z-185f5d8b95cx9g8lhC1NYCtgvc00000001w000000000ts6b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:46 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 7bd1ae59-401e-008c-598c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022446Z-185f5d8b95c5lcmhhC1NYCsnsw00000009s0000000002hqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:46 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022446Z-1777c6cb754vxwc9hC1TEBykgw00000008x000000000gyyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:46 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:46 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022446Z-1777c6cb754mrj2shC1TEB6k7w000000092g00000000cxam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:46 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022447Z-r1d97b99577ckpmjhC1TEBrzs000000008900000000095k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022447Z-r1d97b99577tssmjhC1TEB8kan000000083g00000000an71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:47 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022447Z-r1d97b99577hc74hhC1TEBvbns000000082g00000000bzxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:47 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49864	124.43.145.124	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	740	OUT	GET /OnlineBillingEmail/oTodKq4I3Q.pdf HTTP/1.1 Host: billing.waterboard.lk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ebis.waterboard.lk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:48 UTC	278	IN	HTTP/1.1 200 OK Content-Type: application/pdf Last-Modified: Wed, 20 Nov 2024 02:24:45 GMT Accept-Ranges: bytes ETag: W/"f6825e5df33adb1:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:47 GMT Connection: close Content-Length: 709310
2024-11-20 02:24:48 UTC	16106	IN	Data Raw: 25 50 44 46 2d 31 2e 33 0d 0a 31 20 30 20 6f 62 6a 0d 0a 5b 2f 50 44 46 20 2f 54 65 78 74 20 2f 49 6d 61 67 65 42 20 2f 49 6d 61 67 65 43 20 2f 49 6d 61 67 65 49 5d 0d 0a 65 6e 64 6f 62 6a 0d 0a 31 32 20 30 20 6f 62 6a 0d 0a 3c 3c 20 2f 4c 65 6e 67 74 68 20 35 36 31 36 20 2f 46 69 6c 74 65 72 20 2f 46 6c 61 74 65 44 65 63 6f 64 65 20 3e 3e 20 73 74 72 65 61 6d 0d 0a 58 09 c5 5d 6d 73 e3 36 92 fe 7e 55 fb 1f 50 a9 ba 94 f7 2e a1 f1 0e 72 eb ea aa e4 97 49 5c e5 19 4f 6c cd e6 72 97 fb 20 db 9a 19 6f 6c c9 91 e4 99 9d 7f 7f dd 24 00 82 10 65 0a a4 a4 4b aa 92 71 8f d1 fd e0 e9 46 a3 41 82 c0 5f fe e5 4f a2 64 46 09 cb e1 3f 32 37 99 94 c4 68 96 49 41 16 53 f2 2b 99 fd 05 7e 43 eb cc 28 f8 15 9d 49 9e 13 46 33 a3 35 31 59 4e 8d fd 25 27 a3 f0 af c9 b4 29 82 Data Ascii: %PDF-1.31 0 obj[/PDF /Text /ImageB /ImageC /ImageI]endobj12 0 obj<< /Length 5616 /Filter /FlateDecode >> streamX]ms6~UP.rI\Olr ol$eKqFA_OdF?27hIAS+~C(IF351YN%')
2024-11-20 02:24:48 UTC	16384	IN	Data Raw: 00 dd 85 e9 bd 1b af 74 9e bb 88 32 fa 5e 4b 32 6a e1 c0 68 f6 19 23 6d d5 3f 6d b5 3b db fe 11 be ff 00 a7 f4 15 e7 b1 96 30 b2 c6 87 b1 c2 1c d7 09 04 79 82 b2 ab fa a9 f5 7e 8c c6 67 61 e1 b3 07 2a bd 05 b8 93 44 82 5a e7 32 ea f1 cd 74 df 5b b6 7f 37 7d 76 31 25 3f ff d5 c2 fa 93 90 3f f1 ce 65 d9 a4 36 eb 72 72 c1 71 20 0f 5a c6 de d8 fe db 9c ea d9 ff 00 08 bd c9 79 07 f8 c5 fa 8b d5 30 7a ad bf 58 fa 23 2c b3 1e d7 fd a6 ef 40 b8 dd 45 f3 ea 59 90 dd bf a5 f4 9d 67 eb 1e ad 7f cc 7b ff 00 9a ab 62 b5 d0 7f c7 43 59 8e ca 7a fe 23 ed b5 8d 00 e5 e2 6d 97 91 a6 eb 31 ac 75 2c ad df e9 3d 3b 76 7e e5 15 a4 a7 d5 52 5c 2d bf e3 93 ea 95 6c 0e 6d 79 96 93 f9 ad a9 a0 8f fb 72 ea db ff 00 49 62 5f fe 32 3e b7 7d 64 79 c2 fa a5 d2 dd 4c fb 5f 91 fc eb db Data Ascii: t2^K2jh#m?m;0y~ga*DZ2t[7}v1%??e6rrq Zy0zX#,@EYg{bCYz#m1u,=;v~R\-lmyrIb_2>}dyL_
2024-11-20 02:24:48 UTC	16384	IN	Data Raw: 4a 21 32 fa 99 8b 4b e9 fd c9 0b 31 25 da ec 7f 27 df ba df 5c 15 55 45 95 42 8f af 02 d7 3f 4b 9f ea 6c 3d fb af 75 e2 a0 fd 47 bf 75 ee bb d0 bc 33 34 31 46 0d 84 92 16 2b ac db d3 3a 2c ab 3b 47 a7 94 10 ab 48 5a f7 04 58 7b f7 5e eb 60 0f e5 d3 ff 00 09 bb fe 62 bf 3f 17 0f bb 2b 36 0d 5f c6 0e 8e af 2f 2c 9d cd df 98 aa ec 04 b9 ca 19 29 e9 6a 20 9b af 3a 90 8a 2e c0 dd 2b 24 35 49 2d 3e 46 a4 63 f0 b5 51 b9 44 a8 32 43 28 3e ea a5 80 eb 7c ff 00 e5 c9 ff 00 09 bf fe 5d 1f cb de ab 15 bf 57 64 d7 7c 93 ef ba 11 14 d1 76 ef 7c 26 2f 71 26 dc ab 6a 48 62 a9 8f 60 75 fd 1d 05 16 c6 db 14 e2 a9 64 96 0a b9 a8 eb b3 51 79 0a fd f9 40 aa 35 d3 64 d4 f5 7f 48 89 12 24 51 22 47 1c 68 a9 1c 68 a1 11 11 00 54 44 45 01 55 15 45 80 1c 01 ef dd 6b ae 5e fd d7 ba Data Ascii: J!2K1%'\UEB?Kl=uGu341F+:,;GHZX{^`b?+6_/,)j :.+$5I->FcQD2C(>\|]Wd\|v\|&/q&jHb`udQy@5dH$Q"GhhTDEUEk^
2024-11-20 02:24:48 UTC	16384	IN	Data Raw: ec 6b be 04 80 e5 7f a1 7f 4b b3 fe 2f f8 84 f8 f8 bd 25 b7 52 6b cc 2f 70 7b 4b 1b ed d4 82 36 b7 e8 7e 72 61 95 19 6f b0 4c 70 f1 63 c2 47 08 f5 4f 8b 88 c6 3c 5a c7 f7 be 64 57 62 d0 de ae 31 9a d8 a4 b9 a0 b6 4f 05 bb 88 9f a4 89 4e 1e 3b fa bd b8 ce 6c d2 c0 4b 59 27 c1 9d fe 97 e7 a9 5f ff 00 2f b7 fa ec ff 00 a8 44 c6 ff 00 97 ef fe a9 fc 95 26 92 6b 7f d0 b6 48 e3 87 19 1c 23 fd d3 c1 b7 e8 6b e8 fe eb 92 7d af 20 1f a2 e2 01 ef a1 58 b8 56 7f cd bf ae 78 b7 d0 36 74 df ac 2e fb 36 55 20 7b 5b 95 3f a0 b5 8d 11 b7 d4 b2 c6 ff 00 db d9 5f f0 6b 69 ff 00 4d ff 00 d6 77 e5 2b 07 eb 89 2d c0 c1 b1 ba 59 5f 52 c6 75 64 72 1d fa 4e 14 92 16 08 61 e5 66 61 9a 35 b1 3c 25 ff d3 f5 54 92 49 25 20 ca cc c6 c3 af d5 c9 b0 56 ce 04 f2 4f f2 5a 3d ce 5c 9f 5e Data Ascii: kK/%Rk/p{K6~raoLpcGO<ZdWb1ON;lKY'_/D&kH#k} XVx6t.6U {[?_kiMw+-Y_RudrNafa5<%TI% VOZ=\^
2024-11-20 02:24:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: <?xpacket end="w"?>XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP
2024-11-20 02:24:48 UTC	16384	IN	Data Raw: ba f7 5f ff d5 df e3 df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 5e f7 ee bd d7 bd fb af 75 ef 7e eb dd 7b df ba f7 51 2b e8 28 72 b4 35 b8 bc a5 15 26 4b 1b 92 a4 a8 a0 c8 e3 ab e9 e1 ac a1 af a1 ac 85 e9 ea e8 ab 69 2a 12 4a 7a aa 4a aa 79 19 24 8d d5 91 d1 8a b0 20 91 ef 60 95 21 94 d0 8e b4 40 60 55 85 41 eb 4c 6f e6 83 ff 00 09 76 6d d7 b8 77 07 75 ff 00 2e 2a ed b9 b7 e4 cb 4f 53 97 dc 1f 17 37 7e 4c 60 f0 51 64 66 9a 5a ea 89 ba 63 7b 56 79 71 f8 4a 6a 9a ef 1b 45 b7 b3 4d 4d 8f a4 2d 29 a4 c9 d2 40 22 a2 12 56 c1 cf 86 0d 30 6f 2a 5d 7c a4 00 54 7f a6 51 4a fd a2 a7 e5 e7 d4 4d cc Data Ascii: _^u~{^u~{^u~{^u~{^u~{Q+(r5&KiJzJy$ `!@`UALovmwu.OS7~L`QdfZc{VyqJjEMM-)@"V0o*]\|TQJM
2024-11-20 02:24:49 UTC	16384	IN	Data Raw: 24 b3 49 9c a5 00 9d 35 c8 24 96 29 07 63 e6 d5 9c fd 3e ee 7c 39 7f 8a 82 9f c8 01 d0 0b 78 e5 63 09 fa 8b 21 48 3f 86 a4 9f da 6a 7a d7 81 91 6e 55 80 1e 36 1c b2 84 29 24 2c 58 c6 b2 3a 87 d7 e7 1a 59 9a 34 76 9b d2 ca 92 f3 ec 73 dc 4e 94 8c 32 7f 15 71 fe af cb a0 5b 16 12 32 b4 65 49 06 a3 80 23 86 54 76 f0 f2 c8 03 d4 74 73 3e 16 7c de ed af 85 9d 82 db 97 66 55 3e e1 d8 59 fa 9a 78 fb 13 ac b2 75 b3 c7 b7 77 95 04 72 f8 e5 9e 2a 8b b4 7b 7f 77 d1 52 9d 54 b9 60 a0 44 df b1 52 b3 d3 fe d1 a6 85 1c 07 fa bf d5 fe 6e 82 7c db c9 fb 57 39 ed 8d 65 7a 44 5b 8c 43 f4 65 a7 72 d7 c8 d3 e3 4f e8 36 a1 f8 80 e2 0e ea 5f 1e fe 42 f5 4f ca 3e b1 c3 f6 b7 53 67 a3 cd 6d dc ba b6 37 27 8c ac 8d 29 f3 db 63 39 15 32 9c b6 c9 de 38 63 e6 92 8b 2b 8f 91 fc 7e 27 Data Ascii: $I5$)c>\|9xc!H?jznU6)$,X:Y4vsN2q[2eI#Tvts>\|fU>Yxuwr*{wRT`DRn\|W9ezD[CerO6_BO>Sgm7')c928c+~'
2024-11-20 02:24:49 UTC	16384	IN	Data Raw: 00 2d 5e 93 ca ba 85 35 59 6e da a4 87 81 fe 6e 1e d9 dd a2 56 d2 78 60 6a 24 5f ad f8 4d 3f a4 90 61 8e 71 62 db ed c1 6e 3d 4c 3c a8 aa 76 4b 76 f3 a9 ea e6 80 b7 03 d8 5f a1 27 5d fb f7 5e eb de fd d7 ba f7 bf 75 ee bd ef dd 7b ae 98 e8 07 52 91 eb d2 7d 32 11 ab fd 4a 09 12 9a 65 4f f1 d1 27 fa fe fc 72 b4 5f 8f af 2e 3e 2c f4 97 de 3b e7 65 75 de 1e 4d c5 d8 3b c3 69 ec 2d bf 14 53 4a f9 bd ed b8 f0 fb 4b 14 b1 a5 ec e7 21 b8 ab f1 90 6b 16 fa 5b db d0 41 35 cf fb 8d 03 cd ff 00 34 c5 7f c3 d3 6d 2c 70 ff 00 6b 32 7e de 88 3e f7 fe 6f 5f cb 5b af e6 96 97 39 f2 ff 00 aa f2 55 50 7f 9d 83 63 8d d7 d8 0c a7 fc 2b 76 66 d9 cf 62 4f fd 4e f6 6b 17 2d ef d2 71 b0 a7 e7 d1 64 bb f6 d3 07 fc 49 d6 7f d5 e9 d0 37 2f f3 e6 fe 57 b1 c8 f1 9e fa dd 32 14 ff 00 Data Ascii: -^5YnnVx`j$_M?aqbn=L<vKv_']^u{R}2JeO'r_.>,;euM;i-SJK!k[A54m,pk2~>o_[9UPc+vfbONk-qdI7/W2
2024-11-20 02:24:49 UTC	278	IN	Data Raw: e0 35 61 9f fc 9b de cb bf 91 ea 66 e4 6f 79 3e a2 e4 6d 1c dd 85 ff 00 43 ba a2 ad 7f e7 a1 50 2a 0f b6 15 5a 7a 1c 0e b5 c1 96 09 60 91 a0 9e 39 20 a8 85 99 26 8e a2 37 82 48 da 29 24 a7 a9 59 e9 5c 0a 94 7a 79 a0 7d 77 f1 98 59 5e 37 42 c0 59 f0 6b 9e b2 14 e1 14 b2 8d 2f c1 81 a8 f9 11 e4 6a 29 4e 35 e3 c3 ac 3e f7 d5 7a f7 bf 75 ee bd ef dd 7b ab 5d fe 48 fd a1 53 d5 df cc c3 e3 6b 2d 42 c3 8d ec 7c 96 e4 e9 dc d0 d6 e9 14 f4 9d 85 b6 b2 f4 18 f3 51 73 76 55 dc f4 18 e9 87 d0 87 89 00 36 e3 d8 67 9b ed 7e a7 97 f7 05 a7 78 e0 7a 12 f2 a5 c1 b7 de 23 cd 03 71 f9 ff 00 ab e5 d7 d1 1a 2f 52 97 fd 3c 0e 0f fc 6f 9f 70 b7 53 07 5c 67 ff 00 34 ff 00 eb 7f c4 8f 7e eb dd 7c e7 bf 9c f7 fd bd 0b e6 0f fe 24 2d bf ff 00 be b7 62 7b 9c 39 53 fe 48 3b 6f fa bd Data Ascii: 5afoy>mCP*Zz`9 &7H)$Y\zy}wY^7BYk/j)N5>zu{]HSk-B\|QsvU6g~xz#q/R<opS\g4~\|$-b{9SH;o
2024-11-20 02:24:49 UTC	16384	IN	Data Raw: ef fd e9 e8 bd 9d 3f e1 ea 3c e7 5f f9 53 b9 b7 fe 79 26 ff 00 07 5b f4 af d3 fd 8f ba 0e b0 65 38 74 94 de bf f1 60 a9 ff 00 96 94 df fb 95 ef de 7d 2d b4 fe d4 74 11 27 e9 1f ec 7f de cf bf 74 71 d0 8f b0 7f cd 64 bf e5 ae 3b ff 00 71 4f bd 1e 8a 77 1f ed ed ba 10 1f e9 fe c7 fe 20 fb df 48 fa d3 a3 f9 e0 ff 00 d9 76 e4 ff 00 f1 0b 75 07 fe e2 ee 4f 77 8f 8f e5 d6 5b 7b 35 ff 00 2a 15 a7 fc f5 4f ff 00 58 3a a8 23 cd c1 00 86 1a 59 48 05 5d 6e c7 4b a9 f4 ba 82 e4 80 41 00 fd 3e 83 db a0 01 d4 aa 31 a6 9e 5c 3a f5 d5 6c c7 d2 51 24 d3 ca a1 2b 2c 4b 03 39 95 87 8e 9e 9a aa 11 a1 b5 0b b2 dc 1b 82 6f aa 0a 53 cb ab 86 6d 2c a0 9a 37 1f 5f f3 ff 00 3e 8e ef c4 4f e5 ff 00 f2 0f e6 4e 52 39 f6 06 06 3d b9 d7 14 95 66 9f 3f db 5b ba 2a aa 2d 97 41 f6 bf f0 Data Ascii: ?<_Sy&[e8t`}-t'tqd;qOw HvuOw[{5OX:#YH]nKA>1\:lQ$+,K9oSm,7_>ONR9=f?[-A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49866	124.43.145.124	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	382	OUT	GET /EbillViewer/Api/Metering/Ebill_Viewer HTTP/1.1 Host: billing.waterboard.lk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-20 02:24:47 UTC	307	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache Pragma: no-cache Allow: POST Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 02:24:47 GMT Connection: close Content-Length: 72
2024-11-20 02:24:47 UTC	72	IN	Data Raw: 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d Data Ascii: {"Message":"The requested resource does not support http method 'GET'."}

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022447Z-185f5d8b95c4hl5whC1NYCeex000000009hg00000000ahpb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:47 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022447Z-r1d97b99577n5jhbhC1TEB74vn0000000880000000005u4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:47 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:47 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:47 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022447Z-185f5d8b95cdh56ghC1NYCk1x400000003f000000000adux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:47 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	50735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:47 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:48 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022448Z-185f5d8b95c5lcmhhC1NYCsnsw00000009h000000000ynk0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:48 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	50736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:48 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:48 UTC	515	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:48 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022448Z-185f5d8b95cx9g8lhC1NYCtgvc000000020g000000005xu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-20 02:24:48 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	50737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-20 02:24:48 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-20 02:24:48 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 20 Nov 2024 02:24:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241120T022448Z-r1d97b9957747b9jhC1TEBgyec00000008eg0000000009b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-20 02:24:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Target ID:	0
Start time:	21:24:12
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	21:24:16
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1928,i,17314806042429278240,6247876920204235680,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	21:24:19
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	21:25:32
Start date:	19/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	21:25:33
Start date:	19/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	21:25:33
Start date:	19/11/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1372,i,13329912017081315752,456046780158130882,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: Form action: https://ebis.waterboard.lk/Payment/Checkout.php
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: Form action: https://ebis.waterboard.lk/AMEX/ipay-express-checkout/process.php
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: Form action: https://ebis.waterboard.lk/Payment/Checkout.php
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: Form action: https://ebis.waterboard.lk/AMEX/ipay-express-checkout/process.php
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: Form action: https://ebis.waterboard.lk/Payment/Checkout.php
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: Form action: https://ebis.waterboard.lk/AMEX/ipay-express-checkout/process.php

Source: https://billing.waterboard.lk/OnlineBillingEmail/oTodKq4I3Q.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon

Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: No <meta name="author".. found
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: No <meta name="author".. found
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: No <meta name="author".. found

Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: No <meta name="copyright".. found
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: No <meta name="copyright".. found
Source: https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	DNS traffic detected: DNS query: ebis.waterboard.lk
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: billing.waterboard.lk
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\b2dcaf8f-8522-4e7c-81f3-6175c7e1e805.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241120022538Z-195.bmp

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.4832

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.4832

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Windows Analysis Report
https://ebis.waterboard.lk/ebill/?key=oTodKq4I3Q