Edit tour

Windows Analysis Report
http://senacruises.com

Overview

General Information

Sample URL:	http://senacruises.com
Analysis ID:	1531605
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11577196584775358714,988303977893790033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://senacruises.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49770 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: senacruises.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/css/js_composer.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_ed0f056da7742cb75dbe3dfcc6b1e99a.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/css/bootstrap.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/css/font-awesome.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/css/animate.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/css/flickity.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/css/jquery.mCustomScrollbar.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_163e071a4b382db64f39f597edec18eb.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_d03a12b4df0c487814cfe0488d986ac8.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_53bb9be00eefe2d488bac3248bef5ef9.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_aac0a089fa823e89f7c13881d5461757.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/css/addtoany.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_53616828522f5da2043c92164643fe0e.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/chaty/css/chaty-front.min.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda50636e9f233.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_ba71b7ff89e8a917a080977fa0451727.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_137587eed1343d99006b52fed3152293.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/07/Lan-ha-bay-with-sena-cruise-768x403.jpg HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/logo.png HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/anh.jpg HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/vietnam.jpg HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/bg-header.png HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda50636e9f233.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/anh.jpg HTTP/1.1Host: senacruises.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_7a256a0a2702dd79a0133e9cb6b4b062.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/07/Lan-ha-bay-with-sena-cruise-768x403.jpg HTTP/1.1Host: senacruises.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_3bffff925615b95048e66876f674b80d.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_9ec5b7189112c03b14a7944f0fbcf8d0.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_48828a05bf16f0e4de370da9028a4e16.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/logo.png HTTP/1.1Host: senacruises.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/autoptimize/css/autoptimize_single_5dabab8f6c798a0d2b10e158524f5cdb.css HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/vietnam.jpg HTTP/1.1Host: senacruises.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/senacruises/images/bg-header.png HTTP/1.1Host: senacruises.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/06/Banner-website-Sena-2.png HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/06/Banner-website-Sena-1.png HTTP/1.1Host: senacruises.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://senacruises.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: senacruises.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: senacruises.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: leevio.mthemes.org

Source: chromecache_78.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_74.2.dr	String found in binary or memory: http://flickity.metafizzy.co
Source: chromecache_85.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_85.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_78.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_60.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Oswald%3A200%2C300%2C400%2C500%2C600%2C700%26amp%3Bsubset%3D
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9G4kzIxd1KFrBtce5flZDP.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9G4kzIxd1KFrBtce9flZDP.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9G4kzIxd1KFrBtceFflQ.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9I4kzIxd1KFrBmQeNHkQ.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9I4kzIxd1KFrBnQeNHkQ.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/chivo/v18/va9I4kzIxd1KFrBoQeM.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizBREVItHgc8qDIbSTKq4XkRiUa6zETjmbI.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizBREVItHgc8qDIbSTKq4XkRiUa6zUTjg.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizBREVItHgc8qDIbSTKq4XkRiUa6zgTjmbI.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizBREVItHgc8qDIbSTKq4XkRiUa6zoTjmbI.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizBREVItHgc8qDIbSTKq4XkRiUa6zsTjmbI.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizDREVItHgc8qDIbSTKq4XkRiUQ2zcLig.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizDREVItHgc8qDIbSTKq4XkRiUR2zcLig.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizDREVItHgc8qDIbSTKq4XkRiUS2zcLig.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizDREVItHgc8qDIbSTKq4XkRiUb2zcLig.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/librefranklin/v18/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752FD8Ghe4.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fj8Ghe4.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752Fz8Ghe4.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752GT8G.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3iWkUHHAIjg752HT8Ghe4.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playball/v20/TK3gWksYAxQ7jbsKcg8Eneo.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playball/v20/TK3gWksYAxQ7jbsKcg8Knep_Kg.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/playball/v20/TK3gWksYAxQ7jbsKcg8Lnep_Kg.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_83.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/2-days-1-nights-ha-long-bay-tour-with-sena-cruises.html
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/about-us-resposibility-cruise-in-halong
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/explore-halong-bay-on-sena-cruises-3-days.html
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/our-cruise/balcony-deluxe-cabin
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/our-cruise/balcony-executive-cabin
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/our-cruise/balcony-executive-connecting-cabins
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/our-cruise/balcony-family-connecting-cabins
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/our-cruise/sena-terrace-suite
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_137587eed1343d99006b52fe
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_163e071a4b382db64f39f597
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_3bffff925615b95048e66876
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53616828522f5da2043c9216
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53bb9be00eefe2d488bac324
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7a256a0a2702dd79a0133e9c
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda506
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_aac0a089fa823e89f7c13881
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ba71b7ff89e8a917a080977f
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_d03a12b4df0c487814cfe048
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ed0f056da7742cb75dbe3dfc
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_0567a2a8afb996a9a53003ad0
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_517ac49f1d91bd76b1e8c3dfd
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_85e402fbcbcc894db88a3823b
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_f87a85602eed36f7642816747
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/plugins/chaty/css/chaty-front.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/assets/css/ie8.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/assets/js/html5.js
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/css/addtoany.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/css/animate.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/css/bootstrap.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/css/flickity.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/css/font-awesome.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/css/jquery.mCustomScrollbar.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/css/js_composer.min.css
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/images/navi_tlq.gif)
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/js/addtoany.min.js
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/js/modernizr-2.8.3-respond-1.4.2.min.js
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/themes/senacruises/js/owl.carousel.min.js
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-1024x683.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-1536x1024.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-2048x1366.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-300x200.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-768x512.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-scaled.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-1024x683.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-1536x1024.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-2048x1366.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-300x200.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-768x512.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-scaled.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/Thie
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/Viethai-1-300x200.jpeg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/01/Viethai-1.jpeg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-1024x683.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-1536x1024.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-300x200.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-768x512.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/02/6W2A1670.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/05/33-1-300x225.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/05/33-1-768x576.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/05/33-1.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/05/bb.png
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/06/23-300x225.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/06/23-768x576.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/06/23.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2019/12/Thi
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/27-300x225.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/27-768x576.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/27.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/28-300x225.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/28-768x576.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/28.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/30-300x225.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/30-768x576.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-content/uploads/2021/01/30.jpg
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-includes/js/jquery/jquery-migrate.min.js
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-includes/js/jquery/jquery.min.js
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/wp-json/
Source: chromecache_60.2.dr	String found in binary or memory: https://senacruises.com/xmlrpc.php?rsd
Source: chromecache_60.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_60.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-150296185-1
Source: chromecache_60.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-160418812-2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49770 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/58@12/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11577196584775358714,988303977893790033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://senacruises.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11577196584775358714,988303977893790033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://senacruises.com	1%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
https://gmpg.org/xfn/11	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
https://api.w.org/	0%	URL Reputation	safe
https://static.hotjar.com/c/hotjar-	0%	URL Reputation	safe
http://opensource.org/licenses/MIT	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
http://senacruises.com/	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	216.58.212.132	true	false	unknown
senacruises.com	103.90.234.120	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
leevio.mthemes.org	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://senacruises.com/	false	1%, Virustotal, Browse	unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_9ec5b7189112c03b14a7944f0fbcf8d0.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_163e071a4b382db64f39f597edec18eb.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ba71b7ff89e8a917a080977fa0451727.css	false		unknown
https://senacruises.com/wp-content/themes/senacruises/css/js_composer.min.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_5dabab8f6c798a0d2b10e158524f5cdb.css	false		unknown
https://senacruises.com/wp-content/uploads/2019/07/Lan-ha-bay-with-sena-cruise-768x403.jpg	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_3bffff925615b95048e66876f674b80d.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_48828a05bf16f0e4de370da9028a4e16.css	false		unknown
https://senacruises.com/wp-content/themes/senacruises/css/animate.min.css	false		unknown
https://senacruises.com/wp-content/uploads/2023/06/Banner-website-Sena-1.png	false		unknown
https://senacruises.com/wp-content/plugins/chaty/css/chaty-front.min.css	false		unknown
https://senacruises.com/wp-content/themes/senacruises/images/bg-header.png	false		unknown
https://senacruises.com/wp-content/themes/senacruises/css/jquery.mCustomScrollbar.min.css	false		unknown
https://senacruises.com/wp-content/themes/senacruises/css/font-awesome.min.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53616828522f5da2043c92164643fe0e.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ed0f056da7742cb75dbe3dfcc6b1e99a.css	false		unknown
https://senacruises.com/wp-content/themes/senacruises/css/addtoany.min.css	false		unknown
https://senacruises.com/	false		unknown
https://senacruises.com/wp-content/themes/senacruises/images/vietnam.jpg	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53bb9be00eefe2d488bac3248bef5ef9.css	false		unknown
https://senacruises.com/wp-content/themes/senacruises/css/bootstrap.min.css	false		unknown
https://senacruises.com/wp-includes/css/dist/block-library/style.min.css	false		unknown
https://senacruises.com/wp-content/themes/senacruises/images/logo.png	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_d03a12b4df0c487814cfe0488d986ac8.css	false		unknown
https://senacruises.com/wp-content/uploads/2023/06/Banner-website-Sena-2.png	false		unknown
https://senacruises.com/wp-content/themes/senacruises/css/flickity.min.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_137587eed1343d99006b52fed3152293.css	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda50636e9f233.css	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://senacruises.com/wp-content/uploads/2019/02/6W2A1670.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-1536x1024.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/12/Thi	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_163e071a4b382db64f39f597	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-300x200.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_0567a2a8afb996a9a53003ad0	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/05/33-1.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/themes/senacruises/assets/css/ie8.css	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_3bffff925615b95048e66876	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-1536x1024.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_f87a85602eed36f7642816747	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53bb9be00eefe2d488bac324	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/06/23-300x225.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/themes/senacruises/js/modernizr-2.8.3-respond-1.4.2.min.js	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/Thie	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-scaled.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/xmlrpc.php?rsd	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-300x200.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/05/bb.png	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/themes/senacruises/js/addtoany.min.js	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-1024x683.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53616828522f5da2043c9216	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-json/	chromecache_60.2.dr	false		unknown
https://senacruises.com/our-cruise/balcony-executive-connecting-cabins	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-1536x1024.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/06/23-768x576.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2021/01/30-768x576.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2021/01/27.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-scaled.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/our-cruise/balcony-family-connecting-cabins	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-2048x1366.jpg	chromecache_60.2.dr	false		unknown
http://flickity.metafizzy.co	chromecache_74.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/05/33-1-300x225.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/our-cruise/sena-terrace-suite	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-includes/js/jquery/jquery.min.js	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2021/01/30-300x225.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-300x200.jpg	chromecache_60.2.dr	false		unknown
https://gmpg.org/xfn/11	chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://senacruises.com/about-us-resposibility-cruise-in-halong	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/06/23.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/Viethai-1-300x200.jpeg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7a256a0a2702dd79a0133e9c	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-2048x1366.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3225-1-768x512.jpg	chromecache_60.2.dr	false		unknown
http://daneden.me/animate	chromecache_78.2.dr	false	URL Reputation: safe	unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_d03a12b4df0c487814cfe048	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/themes/senacruises/assets/js/html5.js	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2021/01/28-300x225.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/our-cruise/balcony-deluxe-cabin	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2021/01/27-300x225.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ba71b7ff89e8a917a080977f	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/themes/senacruises/images/navi_tlq.gif)	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/themes/senacruises/js/owl.carousel.min.js	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ed0f056da7742cb75dbe3dfc	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda506	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_aac0a089fa823e89f7c13881	chromecache_60.2.dr	false		unknown
https://senacruises.com/2-days-1-nights-ha-long-bay-tour-with-sena-cruises.html	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-768x512.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-includes/js/jquery/jquery-migrate.min.js	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_137587eed1343d99006b52fe	chromecache_60.2.dr	false		unknown
https://api.w.org/	chromecache_60.2.dr	false	URL Reputation: safe	unknown
https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_517ac49f1d91bd76b1e8c3dfd	chromecache_60.2.dr	false		unknown
https://static.hotjar.com/c/hotjar-	chromecache_60.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT	chromecache_78.2.dr	false	URL Reputation: safe	unknown
https://senacruises.com/wp-content/cache/autoptimize/js/autoptimize_single_85e402fbcbcc894db88a3823b	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-768x512.jpg	chromecache_60.2.dr	false		unknown
http://fontawesome.io/license	chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://senacruises.com/wp-content/uploads/2019/02/6W2A1670-1024x683.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2021/01/30.jpg	chromecache_60.2.dr	false		unknown
https://senacruises.com/wp-content/uploads/2019/01/6W2A3165-1-1-1024x683.jpg	chromecache_60.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
103.90.234.120	senacruises.com	Viet Nam	135917	WEBPANDA-AS-VNCongtyTNHHWebPandaVN	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531605
Start date and time:	2024-10-11 12:52:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://senacruises.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/58@12/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.110, 66.102.1.84, 34.104.35.123, 142.250.185.138, 4.245.163.56, 199.232.210.172, 192.229.221.95, 13.85.23.206, 142.250.186.131
Excluded domains from analysis (whitelisted): fonts.googleapis.com, azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24972)
Category:	downloaded
Size (bytes):	24973
Entropy (8bit):	5.084855257273441
Encrypted:	false
SSDEEP:	192:iBhL3s2A3sWeNYcDnNteUllTASaNghjoK6wLyq7Qu1D7rZh9eSABvbyGv7Nth8Mw:iBlPAcWe7mWuShjoK6wLjFDVdAc9
MD5:	C4F2AAC27495272DBA32240B049CB8E5
SHA1:	5890D227313329F4D32AD061AB4DF9F373D5DFEC
SHA-256:	A4A2AA29350E2E10B6F6243CC7FCCE324D51038A7673CA215AA911FCA601C238
SHA-512:	63019107D3D749302F3B6D7D8B3101151EAEA8B96F99C36E9797B6DDEE5C4A9D33CC91F5AACF14ADEA5CDD291A69F29CA9FBCA352453C3AA14B477D4C19D5CD1
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/plugins/chaty/css/chaty-front.min.css
Preview:	.chaty ,.chaty-chat-view ,.chaty-outer-forms *{box-sizing:border-box}.chaty-agent-data,.chaty-whatsapp-field input[type=text],.chaty-whatsapp-message,.chaty-whatsapp-message p{font-family:Segoe UI,Helvetica Neue,Helvetica,Lucida Grande,Arial,Ubuntu,Cantarell,Fira Sans,sans-serif}.chaty-agent-header,.chaty-channel,.chaty-channels,.chaty-form-body,.chaty-tooltip{position:relative}.chaty-tooltip .on-hover-text,.chaty-tooltip .on-hover-text:before,.chaty-tooltip:after,.chaty-tooltip:before{text-transform:none;font-size:.9em;line-height:1;user-select:none;pointer-events:none;position:absolute;display:none;opacity:0}.on-hover-text{display:none;white-space:pre}.chaty-tooltip .on-hover-text:before,.chaty-tooltip:before{content:"";border:5px solid transparent;z-index:1001}.chaty-tooltip:after{content:attr(data-hover)}.chaty-tooltip .on-hover-text,.chaty-tooltip:after{text-align:center;min-width:1em;max-width:21em;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;padding:5px 15px;borde

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 274 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18214
Entropy (8bit):	7.977405673495459
Encrypted:	false
SSDEEP:	384:N050SCgkfc7Wb2zh8xyyTjRC6om4AkFxw+yTjEKdGxrRSzyo4zitSOd:Nc0S0JQuJMm4rmZGxUOGSC
MD5:	33ADE8945A7B9AAEE652911E34549627
SHA1:	6F5CC593C96016DFA080D22E54230D1F0EFE32B6
SHA-256:	DF405A0AD3A24447C8816465DCA1A10FCDFD1D221E5FFB64B41A87488A4D7660
SHA-512:	A78B010E3280B4EA96215D45F4F39922830B347F558F3421D9AA890828C4624E88DDE05C136ACC7DA7BC7D98E5C7603D228160A387FB9B42FA6C479BC53DAA01
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......@........k....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:9D5E0793D69111E98E83ABE25898B07A" xmpMM:DocumentID="xmp.did:9D5E0794D69111E98E83ABE25898B07A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9D5E0791D69111E98E83ABE25898B07A" stRef:documentID="xmp.did:9D5E0792D69111E98E83ABE25898B07A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>H..F..C.IDATx..}...E..W==3..K...$.K..`..B.WAQAD]<WY.\Ew.vWEQq.Q."..cAW.ET..S.................x..*..Py===..U_..K]q..

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	462162
Entropy (8bit):	4.973280184049232
Encrypted:	false
SSDEEP:	3072:gRFv8uExfGPF3TkjgPGcHCWJpyIfeB1u6eW5LRXuurpAx5fR46wuzEaCeVGNz+CW:gRFvcHy7P
MD5:	54923177A7BF9238F7C66C1DB7BB6480
SHA1:	49E8FC1E27FF84A069CC90E360A0E21048D73497
SHA-256:	133B213EDC496BE3015323F282421FC4D50B8B2D1FFE8B9297292EC89F987129
SHA-512:	87537BCD64E91736EC2A79D01BE66B06C25DDBB47B10C2F7597C87AA3BF4630C8F30BC81E6945C189634E525222993A6E6B08E5BC7D723F810FCA48A24D9FB46
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/css/js_composer.min.css
Preview:	.vc_non_responsive .vc_row .vc_col-sm-1,.vc_non_responsive .vc_row .vc_col-sm-10,.vc_non_responsive .vc_row .vc_col-sm-11,.vc_non_responsive .vc_row .vc_col-sm-12,.vc_non_responsive .vc_row .vc_col-sm-2,.vc_non_responsive .vc_row .vc_col-sm-3,.vc_non_responsive .vc_row .vc_col-sm-4,.vc_non_responsive .vc_row .vc_col-sm-5,.vc_non_responsive .vc_row .vc_col-sm-7,.vc_non_responsive .vc_row .vc_col-sm-8,.vc_non_responsive .vc_row .vc_col-sm-9{padding-left:15px;padding-right:15px;float:left}.vc_parallax-inner iframe,.vc_video-bg iframe{max-width:1000%}.vc_clearfix:after,.vc_column-inner::after,.vc_el-clearfix,.vc_row:after{clear:both}.vc-composer-icon,[class*=" vc_arrow-icon-"],[class^=vc_arrow-icon-]{speak:none;font-variant:normal;text-transform:none;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.vc_row:after,.vc_row:before{content:" ";display:table}@media (max-width:767px){.vc_hidden-xs{display:none!important}.vc_el-clearfix-xs{clear:both}}@media (min-width:768px) a

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 274 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18214
Entropy (8bit):	7.977405673495459
Encrypted:	false
SSDEEP:	384:N050SCgkfc7Wb2zh8xyyTjRC6om4AkFxw+yTjEKdGxrRSzyo4zitSOd:Nc0S0JQuJMm4rmZGxUOGSC
MD5:	33ADE8945A7B9AAEE652911E34549627
SHA1:	6F5CC593C96016DFA080D22E54230D1F0EFE32B6
SHA-256:	DF405A0AD3A24447C8816465DCA1A10FCDFD1D221E5FFB64B41A87488A4D7660
SHA-512:	A78B010E3280B4EA96215D45F4F39922830B347F558F3421D9AA890828C4624E88DDE05C136ACC7DA7BC7D98E5C7603D228160A387FB9B42FA6C479BC53DAA01
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/images/logo.png
Preview:	.PNG........IHDR.......@........k....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:9D5E0793D69111E98E83ABE25898B07A" xmpMM:DocumentID="xmp.did:9D5E0794D69111E98E83ABE25898B07A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9D5E0791D69111E98E83ABE25898B07A" stRef:documentID="xmp.did:9D5E0792D69111E98E83ABE25898B07A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>H..F..C.IDATx..}...E..W==3..K...$.K..`..B.WAQAD]<WY.\Ew.vWEQq.Q."..cAW.ET..S.................x..*..Py===..U_..K]q..

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42839), with no line terminators
Category:	downloaded
Size (bytes):	42839
Entropy (8bit):	5.142640723743639
Encrypted:	false
SSDEEP:	768:hStyRbNWmYd7Z9t6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:hStyRsmYd7Z9t6+R9
MD5:	F59E3F4C0087B4D8DDC27BDD9C9AB92B
SHA1:	FAC9B521062FEB5250C04D62128A8C3DDB312632
SHA-256:	247184981EB6F698A94E431A83D68C6B0DF623CCE57B6E29DC5A6C11E23AA195
SHA-512:	EAA92F05B0F29794C326D349882F1FA32115B81EA0C4C064ACACBAED7A6A9C80F1CAF2CB3C9CE64E3023D5D4497CD7665D6A83D7455B26878DE29390A83C2F44
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/css/jquery.mCustomScrollbar.min.css
Preview:	.mCustomScrollbar{-ms-touch-action:pinch-zoom;touch-action:pinch-zoom}.mCustomScrollbar.mCS_no_scrollbar,.mCustomScrollbar.mCS_touch_action{-ms-touch-action:auto;touch-action:auto}.mCustomScrollBox{position:relative;overflow:hidden;height:100%;max-width:100%;outline:0;direction:ltr}.mCSB_container{overflow:hidden;width:auto;height:auto}.mCSB_inside>.mCSB_container{margin-right:30px}.mCSB_container.mCS_no_scrollbar_y.mCS_y_hidden{margin-right:0}.mCS-dir-rtl>.mCSB_inside>.mCSB_container{margin-right:0;margin-left:30px}.mCS-dir-rtl>.mCSB_inside>.mCSB_container.mCS_no_scrollbar_y.mCS_y_hidden{margin-left:0}.mCSB_scrollTools{position:absolute;width:16px;height:auto;left:auto;top:0;right:0;bottom:0;opacity:.75;filter:"alpha(opacity=75)";-ms-filter:"alpha(opacity=75)"}.mCSB_outside+.mCSB_scrollTools{right:-26px}.mCS-dir-rtl>.mCSB_inside>.mCSB_scrollTools,.mCS-dir-rtl>.mCSB_outside+.mCSB_scrollTools{right:auto;left:0}.mCS-dir-rtl>.mCSB_outside+.mCSB_scrollTools{left:-26px}.mCSB_scrollTools .mC

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13204)
Category:	downloaded
Size (bytes):	105070
Entropy (8bit):	5.469019419150812
Encrypted:	false
SSDEEP:	3072:4b0hC/vDPTcIDT9TETcoTcUTcIgTXTaT5TG3TcOTcDTcJ1Tc/TcA4oTc7HrTc4TK:4b0hC/vDPTcIDT9TETcoTcUTcIgTXTaH
MD5:	BE4FDC57CD1E88C2981BC560278E091B
SHA1:	66FC609C3495D61CB6BF7C046FA9F5C74C1C9878
SHA-256:	79CAB9B60380DF3A35889EA173B4B7EB60E56578D766B61541B74DE0A4594A90
SHA-512:	BA261F5F62247EEE744376C008AE64677B2E275C3A90A7613B1C13D5D2834AB5D5945CDAAB7ED5BA0ADF033705EFC6BDD4733452F963968797A677E3453DAF19
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="en-US" class="no-js no-svg"><head> <script data-wpmeteor-nooptimize="true" >/<![CDATA[/var _wpmeteor={"gdpr":true,"rdelay":2000,"preload":true,"elementor-animations":true,"elementor-pp":true,"v":"3.3.3","rest_url":"https:\/\/senacruises.com\/wp-json\/"};(()=>{try{new MutationObserver(function(){}),new PerformanceObserver(function(){}),Object.assign({},{}),document.fonts.ready.then(function(){})}catch{t="wpmeteordisable=1",i=document.location.href,i.match(/[?&]wpmeteordisable/)\|\|(o="",i.indexOf("?")==-1?i.indexOf("#")==-1?o=i+"?"+t:o=i.replace("#","?"+t+"#"):i.indexOf("#")==-1?o=i+"&"+t:o=i.replace("#","&"+t+"#"),document.location.href=o)}var t,i,o;})();..;/* /</script><script data-wpmeteor-nooptimize="true" >/<![CDATA[*/(()=>{var M=class{constructor(){this.l=[]}emit(e,r=null){this.l[e]&&this.l[e].forEach(n=>n(r))}on(e,r){this.l[e]\|\|=[],this.l[e].pus

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8141), with no line terminators
Category:	downloaded
Size (bytes):	8141
Entropy (8bit):	5.023910442812765
Encrypted:	false
SSDEEP:	192:Dt6GtkoeNOd+TBUzEd85pfxoxmg2rxt3jgcdxUP:Dt6GOoeAdQBUPpfxoEg2rxt3F+P
MD5:	B52A8C9DDA0A92734D0F192B2675BBFA
SHA1:	9418AEF2813F4C1615EC1CFD651B46988FCE4392
SHA-256:	0E7FCA87F163D3B62410447C6B4901A5A8882FD030C422CE468A49DD49D62E9F
SHA-512:	A3C59A0452928BDF912555060CF277042E782060629D12B89080E378AA503E091C67D641A3A5FB30D46573586C081126F0CA11B9761E8F5834E5814858AC70D7
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_d03a12b4df0c487814cfe0488d986ac8.css
Preview:	@media screen and (min-width:768px){.clear-cols [class=col-sm-6]:nth-of-type(2n+1){clear:both}.clear-cols [class=col-sm-4]:nth-of-type(3n+1){clear:both}.clear-cols [class=col-sm-3]:nth-of-type(4n+1){clear:both}}@media screen and (min-width:992px){.clear-cols [class=col-md-]:nth-of-type(n){clear:none}.clear-cols [class=col-md-6]:nth-of-type(2n+1){clear:both}.clear-cols [class=col-md-4]:nth-of-type(3n+1){clear:both}.clear-cols [class=col-md-3]:nth-of-type(4n+1){clear:both}#logo-mobile{display:none}}@media screen and (min-width:1200px){.clear-cols [class=col-lg-]:nth-of-type(n){clear:none}.clear-cols [class=col-lg-6]:nth-of-type(2n+1){clear:both}.clear-cols [class=col-lg-4]:nth-of-type(3n+1){clear:both}.clear-cols [class=col-lg-3]:nth-of-type(4n+1){clear:both}}@media screen and (min-width:1900px){.bg-radius-top:after,.bg-radius-bottom:after{background-size:100% 30px}.welcome.style-v2 .entry-thumbnail{margin:0 -20px 0 -60px}.welcome.style-v2 .entry-thumbnail>{padding:0 15px}.we

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 30x20, components 3
Category:	downloaded
Size (bytes):	624
Entropy (8bit):	6.488544814082784
Encrypted:	false
SSDEEP:	12:VvI4wEXB+4OQ72KuXudlozD6grRyucuNPlWGzt8:tbFgoFTXc6gdtpEGzt8
MD5:	E1B638B4D7CFB1D62744AF6AC58E9D19
SHA1:	C0FBF7241F60F343CA9CDE8AC84FD4E0AEAD325A
SHA-256:	D803B0AEBDEE0DC5A9DAD891B642D2B2D9CF4A81F4D192C530141EA1460B69D6
SHA-512:	44C3CCC79EBF76A269A7BB4889DD8418C0E5783D65FBDBF26A6A5BFB3EA54C31BEFD0BD90CAAA695F979565B07B6FEBB64214CE1C6B1337043EE1BCBC0E03D3B
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/images/vietnam.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................................{....................................................................1.!..A.aq."...R#....................!...1a....A."q#..............?...\tr..zV<....R\|k.d..D...Y.)&r.#i:...h.5...J.k.....w..i.O...Qnk..p;.......0(..@.!.Z...5G+I.64.DD-k.}..`..g3;.y.$-....$].P.YN..H.M.'.psW....4I....r..Mqpv@.L...f.*.....,v?..p.....5.'D.=...\..A$.:U..a.'..PA...o.q.......gw...:k....).j..]<..M..HX..P,.~.7......?f...../...

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1424), with no line terminators
Category:	downloaded
Size (bytes):	1424
Entropy (8bit):	4.727269450100173
Encrypted:	false
SSDEEP:	24:0Bos2gNALeLrX/Dx6Z9SEdf2f6rrH+q9EsmI7PoA05s0Mcr0/ssqGsX0oDi19:0BWLKYok7X
MD5:	AC918279935F5D52FEAC3099725E7A22
SHA1:	F6F710F3801B36CBAE733F93B456977DD8EC044B
SHA-256:	60DDBDC59A12FDDD73E6764E5B95F301E81F1104004FFC1519C1064C45ED41B7
SHA-512:	B5C36895B1F31B395D2802D2CF6DE0CD3AEEF268478AA222AD6B5F4BF2E605207FC53F5CCD0FA7A18C9765C5F49B955C1BEFF5DCCDA9B596EAB6ED4AAF5B4F57
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/css/addtoany.min.css
Preview:	.addtoany_share_save_container{clear:both;margin:16px 0}.addtoany_header{margin:0 0 16px}.addtoany_list{display:inline;line-height:16px}.addtoany_list a,.widget .addtoany_list a{border:0;box-shadow:none;display:inline-block;font-size:16px;padding:0 4px;vertical-align:middle}.addtoany_list a img{border:0;display:inline-block;opacity:1;overflow:hidden;vertical-align:baseline}.addtoany_list a span{display:inline-block;float:none}.addtoany_list.a2a_kit_size_32 a{font-size:32px}.addtoany_list.a2a_kit_size_32 a>span{height:32px;line-height:32px;width:32px}.addtoany_list a>span{border-radius:4px;display:inline-block;opacity:1}.addtoany_list a .a2a_count{position:relative;vertical-align:top}.addtoany_list a:hover,.widget .addtoany_list a:hover{border:0;box-shadow:none}.addtoany_list a:hover img,.addtoany_list a:hover span{opacity:.7}.addtoany_list a.addtoany_special_service:hover img,.addtoany_list a.addtoany_special_service:hover span{opacity:1}.addtoany_special_service{display:inline-block;v

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 768x403, components 3
Category:	downloaded
Size (bytes):	72632
Entropy (8bit):	7.975018633356638
Encrypted:	false
SSDEEP:	1536:PbLpxGUn7Lg2AlYLnxc8Eo1cArAQT++eyHZ/0hRX1wxmBuSu2F:jLrGU7JA6LxhENs5E2vSuY
MD5:	06ED4CE6CC17081E05597D54D54287AB
SHA1:	7FDD7D2A418A8FD75C98F05C5A13FFAFB216CA20
SHA-256:	D4D18D8D2C5E57575F2DFB2860A607283B7926C43EDB705CB9EEAC52A643CD33
SHA-512:	B1D558E14A8C48D79B558F558FB13A0F49F917C4C8EE050FE624A5B4AAAAAEDF3257D13815FA274587F9A04E9A9B655AC22357EA35CFA24F9C3B3ADC131FAC8E
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/uploads/2019/07/Lan-ha-bay-with-sena-cruise-768x403.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..<.<.j..zi..W......6U.'.'."...f...)...D.">i..`.jQ....e.."....v.jFJ.N(A.BqR.:R-.....[XU.6.....b...Q.5s.4y.N.b.......A...qE.b.N)\|...b....o....ce4...!).".S.4.h.. .g.(...E.H..1R`..S...V...$...BT.W..J....0h.W.i.....=.1...U.b...iL.......Y.E.b..aHR.....1......*.4..=....T...\.<.....3.@....r{..+f...F....

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4688), with no line terminators
Category:	downloaded
Size (bytes):	4688
Entropy (8bit):	4.785012173259778
Encrypted:	false
SSDEEP:	48:sCeh6egQtYUfGDayy1OkJDQooLwt0/TkSeLDRqPL8:l+Y4yy1OKXxt0b88PL8
MD5:	1E13C0FE56EF36F169CA0B295A2EF911
SHA1:	419520290CB7B602C6A898D73E88B57187506758
SHA-256:	2331833EB5AE2113C134AE33D174A063E099744AE061450802A2B458ACC5A408
SHA-512:	DB2A0C5920E2CE025C816E9EFDB11C24F8D3C9F51259481ECC4EC071272A16F4E11FC40185E2360E5A4DBC4039AFF367B395E53F5E7BD5D829D899368B1C7D27
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53616828522f5da2043c92164643fe0e.css
Preview:	@font-face{font-family:'icomoon';src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/vietiso.eot);src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/vietiso.eot) format('embedded-opentype'),url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/vietiso.ttf) format('truetype'),url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/vietiso.woff) format('woff'),url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/vietiso.svg) format('svg');font-weight:400;font-style:normal}[class^=icon-],[class*=" icon-"]{font-family:'icomoon' !important;speak:none;font-style:normal;font-weight:400;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.icon-left-arrow:before{content:"\e955"}.icon-right-arrow:before{content:"\e956"}.icon-pinterest-social-logo:before{content:"\e950"}.icon-linkedin-letters:before{content:"\e951"}.icon-google-plus-logo:before{content:"\e952"}

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12577), with no line terminators
Category:	downloaded
Size (bytes):	12577
Entropy (8bit):	5.035559677030543
Encrypted:	false
SSDEEP:	384:Bh0vg+NQ4twO7LB73jhc5NzXbf1udFuZtI4A:Bh0g+G4twO7LB73jhc5NzXbf1udFF
MD5:	8F0F78F4837C2C99BAEC9F4EF66BC9C4
SHA1:	115008A645F58D2AD675F11C8D7D97E9F713A3A4
SHA-256:	F0B029D9BC3FC192D65F2DA1E04C9B572BFAF5EFE8109B62ACF661109C366381
SHA-512:	17DC57548FD213B44671E1BF9D0A3B65B79A88B991928D78B751D42C9B36668FFF166D5CB5B64A19A32728A2585C860E72842105592C89ABFE6D89FD8B48136B
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7a256a0a2702dd79a0133e9cb6b4b062.css
Preview:	.home_index section{margin:40px auto;overflow:hidden}.home_index section:last-child{margin:40px auto 0;padding-bottom:40px}.home_index .off-color{background-color:#f6f6f6 !important;padding:40px 0;margin:12px 0 0}.home_index .section-center{margin:0 auto}.hero-carousel{margin:0 !important;width:100% !important;position:relative;height:1280px;min-height:500px}.hero-carousel .rs-carousel-mask{width:100%;height:100%;position:relative}.hero-carousel .rs-carousel-action{position:absolute;top:50%;background-image:url(//senacruises.com/wp-content/themes/senacruises/rooms/../images/icons.png);text-indent:-99999px;height:29px;width:16px;z-index:5;display:block;margin-top:-10px;opacity:0;-webkit-transition:opacity .3s linear;-moz-transition:opacity .3s linear;transition:opacity .3s linear}.touch .hero-carousel .rs-carousel-action,.hero-carousel:hover .rs-carousel-action{opacity:1}.hero-carousel .rs-carousel-action-prev{left:28px;background-position:-212px -9px}.hero-carousel .rs-carousel-action-

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43952)
Category:	downloaded
Size (bytes):	120714
Entropy (8bit):	5.09392016155295
Encrypted:	false
SSDEEP:	768:ly3Gxw/Xc/YCFJxtQ8IuiHlqLmzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1F1:Xw/MnBIuiHlqLmN8lDbNmPbS
MD5:	1A2D8DD6862BCDFB99C00603CBE6597C
SHA1:	906189F43EED7D1FD0B4403B342C3AC354F0261E
SHA-256:	FC4A390C309EA3DD35271DAD3E8375D5759BCEAE5D3F0761A34790F9BE701BDB
SHA-512:	4BC316B47F40E160D942B066B389E9CC493079589D1ADB64E5BD83A65117DC5F7B3692644F21FD5FAE08258B2CC5085CD58CEB2264EF49925D75A3A1D1376907
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/css/bootstrap.min.css
Preview:	html{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{height:0;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box}pre{overflow:auto}code,kbd,pre,samp{font-size:1em}button,input,optgroup,select,textarea{margin:0;font:inherit;color:inherit}button{overflow:visible}button,select{text-transfor

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6591), with no line terminators
Category:	downloaded
Size (bytes):	6591
Entropy (8bit):	5.170533086500663
Encrypted:	false
SSDEEP:	96:gYpJG7bmUgYrvOUyD+k3eD6LpcvUcmePXuidt/pR:yIYLyc9PeIr
MD5:	3775CD792AAAFA795514B8F03941D4EA
SHA1:	0953D168702E49AE7D3A8211B0121D256B4DD2BD
SHA-256:	8CF88B59FD90CF5FB1EC4AE42E8E2C0B4142C2FF1365B873DE94D70D0BDFC254
SHA-512:	0830C31A5763585835BDC1F07DBE990A3013F4C46F246AA6D860039D332920ACD322F1FC3ADBE10803E7D17BDE89F6A54D90308E3F2348DCF049D5BBD1EE25AB
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda50636e9f233.css
Preview:	.gform_wrapper.gravity-theme .gfield input.large,.gform_wrapper.gravity-theme .gfield select.large{width:100%;color:#000}#field_1_6,#field_1_5{float:left;width:100%}#input_1_6{border:solid 1px #bbb;height:50px;border-radius:3px}@media only screen and (max-width:600px){.gform_wrapper.gravity-theme .gfield input.medium,.gform_wrapper.gravity-theme .gfield select.medium{width:calc(100% - 0px) !important}.gform_wrapper.gravity-theme .gfield textarea.large{height:100px !important}}#gform_submit_button_1,#gform_submit_button_2{color:#000 !important}#main1{padding-top:30px}.campaign #campaign-image{float:left;width:62.4%}.gform_wrapper.gravity-theme .gfield textarea.large{height:100px !important}#gform_fields_2 #field_2_44 .ginput_container{width:100% !important}#gform_fields_2 fieldset legend{text-transform:inherit;font-family:"Futura Book",Helvetica,Arial,sans-serif}.gform_wrapper.gravity-theme .gfield-choice-input+label{max-width:100% !important}#gform_fields_2 input{height:auto !important

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112427
Entropy (8bit):	4.925295015861728
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq
MD5:	319580D7D8944A1A65F635E0D11E5DA5
SHA1:	E23BC18EF1B0F78F7010E3C16E4C5E1F333248BD
SHA-256:	FB3A89CC6347E098063BD15F285BC90411846DDCE6F17812364FEEDAB67A67F5
SHA-512:	743825EAEA11208277528E506C115EC786AB060095AE4250C65A9B02FE9E5CB2AC5AC386532486A2678B9615490CE75BA096A9FD2041200989AD07A726B5D9D0
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.266823615280524
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFF9sllvkg1p:6v/lhPfZMysO82F9EBbp
MD5:	1BAF4938C47211962F059286BAF481B8
SHA1:	71ED93364B260307AB82747E2637C43D6F3D463E
SHA-256:	A0C1BB4B2B782D5FE3042E951FE7E51D178F8EB96C22246BAB8EEE03AEC046A5
SHA-512:	284646F39B1E331F42A6A765DC6EB495BEAEC5D516F545191B9B23C97011AADD8A30EC45132B84DD90CDA540A6FD4DD11A6CAAA3D4056014DF30165215818427
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDAT..c```.......a.v.....IEND.B`.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2547), with no line terminators
Category:	downloaded
Size (bytes):	2547
Entropy (8bit):	4.998048882898218
Encrypted:	false
SSDEEP:	48:sF/I/R/dbNEbmCC0mCC1TEdoLfVCyVCTCjJPWt2KAev0:dJCCpCCmJkeAB
MD5:	B8BA03EC5BB6F6F9FF943814650E8A67
SHA1:	B6172467D80270CDA87B93B960C15AC42703B6CC
SHA-256:	7E8C703B6B935831CFE2DA05D27ECF039CA7525C0F5D130C33F17F8C30E38EA7
SHA-512:	43C37D28723A563C28BA209B17CA9575880B581CFE3B58BAC06AF0E7E9001E6F372B41914B72E7A39AC38D1261C2AD315601B8772AD88A03DB6C752A14259917
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ed0f056da7742cb75dbe3dfcc6b1e99a.css
Preview:	@font-face{font-family:"Futura Book";src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/57a6731b-fa5c-4c8a-bea8-e2f1a287f309.eot-#iefix);src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/57a6731b-fa5c-4c8a-bea8-e2f1a287f309.eot-#iefix)format("eot"),url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/4d0e252c-d811-4a5d-a7f3-6ad72c6b76f2.woff) format("woff"),url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/54250d43-02be-4ff9-b802-a4ea104a0611.ttf) format("truetype"),url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/15c556fc-4608-4b01-8a0d-9c8631c8bd74.svg#15c556fc-4608-4b01-8a0d-9c8631c8bd74) format("svg")}@font-face{font-family:"Minion Regular";src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/35d9d14d-a31d-4d9b-a998-00ffc9bd46a4.eot-#iefix);src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/35d9d14d-a31d-4d9b-a998-00ffc9bd46a4.eot-#iefix)format("eot"),url(//senacruises.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 30x20, components 3
Category:	downloaded
Size (bytes):	1071
Entropy (8bit):	7.281541026122339
Encrypted:	false
SSDEEP:	24:tbFpwRdDTU0QuTl+19+dvpcMZ1cGn7feFr44Es:JiFTiu8oyMV6TEs
MD5:	10AF8868C5587E46D72C266E345CA2CA
SHA1:	E54A1FC4174A8EFF1ECABDFC6ED55A510BF7C5A7
SHA-256:	D9D9DB32078B08DE25857B9E15ECA9957837E9C9EB5AB272CC16FDF1A16D0939
SHA-512:	0730D20F98DD218ADF9B20D1C167859D6DF6E5CFAFC6751F84391DD824645B02E13B03B42727CEA247EAFDFF9DB1FB6D3524FB9A5E07655C9C70FF64764B5AEF
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/images/anh.jpg
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..........................................................................................................................................................................................................................................!"..1A2a#.QRcD........................!..1AQa."..2B..q....Rbr#S$4....3.............?.o..%....a..2D.S"...!@.....E..X..B.~<5...z/.n......c.V.U}p7]....,.!D.......6r;.qr.cT.:.2.......-1o.a.~.c.q..6.B2.....K..J.N..J....2.........F.......$1.T(su.h.]C.bq..$i.m6...r.<N.`i..V.g#'r5.7[.F..C...I$1.x....o'..... ..4...7.....1j?..8.q).j...[#7q2He.a.R.u...<.>h....G,U..d..P1.H8.2............+p..j..G.......\|?...0.X........* .aoR8...-...Ci..%...p..-l.......\..GLF.e....E.xd.O.(a"M.n..Q....QX.[P..=n....)..*.T..2...m...^..2..4...."....b...F.$t.U"..L.J#p..._.:K.&..~V...^/Em.K...x..;....6V..:t.^....~.\&...R.rm..}..t...~.g.....5.<+1.:........k...U.Z..$.DMQ..v.2.x6O......}.E........oO._..rvF.$...

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3871), with no line terminators
Category:	downloaded
Size (bytes):	3871
Entropy (8bit):	4.93349068752019
Encrypted:	false
SSDEEP:	48:ZmmpLxrGOfkm0xXR0a3Vs8wjuNXVQeieGa3VoYQz5UswlAlllq94OFfl4OFfx8iB:ZZpLxrtN0xXRfhPkz54e3e4Or4OY2X
MD5:	1BA71B68BB8544E6EDAF25A92E9AC421
SHA1:	202FA824A5C7073EC3D32ADC5E5C20450721DFA2
SHA-256:	DC74598353AD03C323E564F39DFF1783418FF9D23396D9E8D6C9030CE9404F3D
SHA-512:	2B0709FC97C7924B6B9413041797CBBDA38525F95AEC73D390B6920437975BF6709A8A89D745F4071A4777C1236F9A7F32818EFB8CA317CBB481A1A958E7300B
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_ba71b7ff89e8a917a080977fa0451727.css
Preview:	[class^=wp-block-]:not(.wp-block-gallery) figcaption{font-style:italic;margin-bottom:1.5em;text-align:left}.rtl [class^=wp-block-]:not(.wp-block-gallery) figcaption{text-align:right}p.has-drop-cap:not(:focus):first-letter {font-size:5em;margin-top:.075em}.wp-block-image{margin-bottom:1.5em}.wp-block-image figure{margin-bottom:0;margin-top:0}.wp-block-image figure.alignleft{margin-right:1.5em}.wp-block-image figure.alignright{margin-left:1.5em}.wp-block-gallery{margin-bottom:1.5em}.wp-block-gallery figcaption{font-style:italic}.wp-block-gallery.aligncenter{display:flex;margin:0 -8px}.wp-block-quote:not(.is-large):not(.is-style-large){border:0;padding:0}.wp-block-quote.alignleft p:last-of-type,.wp-block-quote.alignright p:last-of-type{margin-bottom:0}.wp-block-quote cite{color:inherit;font-size:inherit}.wp-block-audio audio{display:block;width:100%}.wp-block-cover-image.alignright,.wp-block-cover.alignright,.wp-block-cover-image.alignleft,.wp-block-cover.alignleft,.wp-block-cover-image.a

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1758)
Category:	downloaded
Size (bytes):	1857
Entropy (8bit):	4.921290096909551
Encrypted:	false
SSDEEP:	24:J1e9yz2umZOkUef1cer7w2DIywmlm+J+8ari6deNaq0fL:J1e8zLqBbNJ+9i6PL
MD5:	7B7F93EBB77EF4378452C769A5F308A7
SHA1:	DCCF2453FA63F8094D2ABCEA790444B2E108C552
SHA-256:	458C60EED8899CB810ABA300F7B68F3B2F900ADD77EB41B93EC0A6897C3CEDD0
SHA-512:	764C8AF256E9E02275DABD2387D08F4BF0B1ECE05145744D8169CE0B12C5B7955DD2814A86A6D6C9336E422B55748E15A97011551FA4A90B92C1CD44EF77DB6E
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/css/flickity.min.css
Preview:	/! Flickity v2.0.5.http://flickity.metafizzy.co.---------------------------------------------- /..flickity-enabled{position:relative}.flickity-enabled:focus{outline:0}.flickity-viewport{overflow:hidden;position:relative;height:100%}.flickity-slider{position:absolute;width:100%;height:100%}.flickity-enabled.is-draggable{-webkit-tap-highlight-color:transparent;tap-highlight-color:transparent;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.flickity-enabled.is-draggable .flickity-viewport{cursor:move;cursor:-webkit-grab;cursor:grab}.flickity-enabled.is-draggable .flickity-viewport.is-pointer-down{cursor:-webkit-grabbing;cursor:grabbing}.flickity-prev-next-button{position:absolute;top:50%;width:44px;height:44px;border:none;border-radius:50%;background:#fff;background:hsla(0,0%,100%,.75);cursor:pointer;-webkit-transform:translateY(-50%);transform:translateY(-50%)}.flickity-prev-next-button:hover{background:#fff}.flickity-prev-next-button:focus{outline:

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	87389
Entropy (8bit):	4.978708163168716
Encrypted:	false
SSDEEP:	768:YxBUU8kqV2Ey+GXyx9o71ZNYyEAHDXi8imUUDJFcKOSjvBAC4g7oSSF1nIFdVLZ:aBBjvNXqyEAHDD1USJFcKOwr4lGdP
MD5:	9735367228973D0EA738F7EDA3900A6F
SHA1:	815741CA674A6985B615C388094F6DCEB8DE2C14
SHA-256:	31EF475678DC3717208CBB8799C6D3474087825AA372D24C98781E78B17ADD45
SHA-512:	404A7E0A3E2FDE2D9658952EFBF5C5BC907F9DC6313E84C7569E869C336B0AE32CD5FCBC9CEABDED4A1F3309F6394F87CC337700819942F9F3006EFA51054122
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_163e071a4b382db64f39f597edec18eb.css
Preview:	body{font-size:16px;line-height:1.467}.h4-title a:hover{color:#000 !important}.entry-title a:hover{color:#000 !important}a{transition:all .2s;-webkit-transition:all .2s}a:hover,a:focus{outline:none;text-decoration:none}img{max-width:100%;height:auto}p{margin-bottom:20px}h1{font-size:2.33em}h2{font-size:1.85em}h3{font-size:1.7em}h4{font-size:1.14em}h5{font-size:1em}h6{font-size:.85em}h1,h2,h3,h4,h5,h6{margin:0 0 10px}h4,h5,h6{margin-bottom:10px}.container-fluid{max-width:1590px}#logo{float:left}#primary-navigation{float:right}.header{position:relative;z-index:9;box-shadow:0 0 5px 0 rgba(0,0,0,.14);-webkit-box-shadow:0 0 5px 0 rgba(0,0,0,.14)}.header.style-v2{box-shadow:none;-webkit-box-shadow:none}.header.style-v2:after{background-image:url(//senacruises.com/wp-content/themes/senacruises/css/../imgs/bg-header.png);content:"";left:0;position:absolute;right:0;top:0;z-index:-1;background-position:center bottom;bottom:-180px}.header-top{font-size:13px;line-height:40px}.header.style-v4 .head

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5993), with no line terminators
Category:	downloaded
Size (bytes):	5993
Entropy (8bit):	4.872231683772445
Encrypted:	false
SSDEEP:	96:UjQ80gvCA69KVD6yoZW4asZwghtsuiEfE9pEgSEmEApEnEm7EA+S/b3BaUUpxjsU:U0gt6gVDNoZW4as+ght5LMUw/xEFA+SG
MD5:	4902464DAB21A6EE4693909124408C84
SHA1:	8BDFCE0D55E3607BF8BF1C7A59AED0FA22649436
SHA-256:	EF9C09A24F59F7AB51242481638650B4A57E8AE5A6616BB8854697FDC8CD588A
SHA-512:	81EA815E0333130ABE1D95625BBE6358F632975EC15B5A41368D0B07CE76F18EDEC5FD0D691D0DE64F9B63544C7BF75B0BF0788A02765C01960B9E111563BE38
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_aac0a089fa823e89f7c13881d5461757.css
Preview:	.alignright{float:right;margin-left:15px}.alignleft{float:left;margin-right:15px}.aligncenter{display:block;margin-left:auto;margin-right:auto}.wp-caption{max-width:100%}.single .entry-content figure .wp-caption-text{margin-top:5px}.sticky .entry-title{position:relative}.sticky .entry-title:before{content:"\f0e7";font-family:"FontAwesome";display:inline-block;margin-right:1px}.bypostauthor .comment-avatar{border:1px solid #eee;padding:2px}.header .widget-title{display:none}.single .main-content table{margin-bottom:20px}.single .main-content table tbody th{font-weight:400}.single .main-content table tr{border-bottom:1px solid #efefef}.single .main-content table td,th{padding:5px 15px 5px 0}.post-password-form input{display:inline-block;width:auto;padding:10px 20px}.single .entry-content figure{margin-bottom:10px}#wp-calendar{width:100%}#wp-calendar #today{font-weight:700}.widget_archive .screen-reader-text,.widget_categories .screen-reader-text{display:none}.widget select{max-width:100%

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (558), with no line terminators
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	4.842018391601722
Encrypted:	false
SSDEEP:	6:qKyjunoAGqTOIAvOsVdXo/drpWVI9flLeIAvna+TaKmldgjKRVdyNuPVv:qKyqjGrO4oppDQna+G1RCuPVv
MD5:	680526DBAECF24DBA20870D6AB8ED8F8
SHA1:	406ACEB98B54F2A33912CAC8467173C62E66AECA
SHA-256:	61065BA7EEFAA117AE238DF28D31408490D377972FB8EBA847D8E8CABBCB8272
SHA-512:	8A455A69D4C5449CE592BC08991A24CB34DB275B14EDA7098CF3A97170DCC803CEC797ADAD7EAE42577186E0B8C3AB4CCD40B3DBF4A9F0ED11C285B749DD32D6
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_3bffff925615b95048e66876f674b80d.css
Preview:	.hide-for-portrait{display:inherit!important;background:#000}.media-youtube-preview{position:relative}.media-youtube-preview .media-youtube-preview-overlay{cursor:pointer;position:absolute;top:50%;left:50%;border-radius:60px;width:60px;height:60px;background:rgba(0,0,0,.6);margin-left:-30px;margin-top:-30px}.media-youtube-preview .media-youtube-preview-overlay>span{border:inset 20px;border-left-style:solid;border-color:transparent;border-left-color:#fff;display:block;position:absolute;top:50%;left:50%;width:0;height:0;margin-top:-20px;margin-left:-7px}

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51324)
Category:	downloaded
Size (bytes):	51485
Entropy (8bit):	5.087336392814623
Encrypted:	false
SSDEEP:	768:pkZlIbIgx8IMIgIHwO1CA5kiDb3CyQ5xrQe/0STbsysb:pkZ1IHwO1CA5kiDb3CyQ5xrQe/0ST4
MD5:	81C90D6E6F4B3030A6B6DE88273799F4
SHA1:	5D3EDAF7CF0E1E9B8FA1FC32C8015C35C4B6C5E8
SHA-256:	6DCAB98E09788384B163B9F72475E1EEE33449F69327362C47F942F2D2EB34C2
SHA-512:	C178F9CAFDDC2EAE9CC787936D230D483D016DA72A1EAE8A1086C33B6F0B5AFEFC83EB894C8EAB2CC7CB59E7A23814E3BED150320DF0E67809C7A0482A6D690E
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/css/animate.min.css
Preview:	@charset "UTF-8";/!.Animate.css - http://daneden.me/animate.Licensed under the MIT license - http://opensource.org/licenses/MIT..Copyright (c) 2014 Daniel Eden./.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:both;animation-fill-mode:both}.animated.infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animated.hinge{-webkit-animation-duration:2s;animation-duration:2s}@-webkit-keyframes bounce{0%,100%,20%,53%,80%{transition-timing-function:cubic-bezier(.215,.61,.355,1);-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}40%,43%{transition-timing-function:cubic-bezier(.755,.050,.855,.060);-webkit-transform:translate3d(0,-30px,0);transform:translate3d(0,-30px,0)}70%{transition-timing-function:cubic-bezier(.755,.050,.855,.060);-webkit-transform:translate3d(0,-15px,0);transform:translate3d(0,-15px,0)}90%{-webkit-transform:translate3d(0,-4px,0);transform:translate3d(0,-4px,0)}}@keyframes bounce{0%,100

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 30x20, components 3
Category:	dropped
Size (bytes):	1071
Entropy (8bit):	7.281541026122339
Encrypted:	false
SSDEEP:	24:tbFpwRdDTU0QuTl+19+dvpcMZ1cGn7feFr44Es:JiFTiu8oyMV6TEs
MD5:	10AF8868C5587E46D72C266E345CA2CA
SHA1:	E54A1FC4174A8EFF1ECABDFC6ED55A510BF7C5A7
SHA-256:	D9D9DB32078B08DE25857B9E15ECA9957837E9C9EB5AB272CC16FDF1A16D0939
SHA-512:	0730D20F98DD218ADF9B20D1C167859D6DF6E5CFAFC6751F84391DD824645B02E13B03B42727CEA247EAFDFF9DB1FB6D3524FB9A5E07655C9C70FF64764B5AEF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d..........................................................................................................................................................................................................................................!"..1A2a#.QRcD........................!..1AQa."..2B..q....Rbr#S$4....3.............?.o..%....a..2D.S"...!@.....E..X..B.~<5...z/.n......c.V.U}p7]....,.!D.......6r;.qr.cT.:.2.......-1o.a.~.c.q..6.B2.....K..J.N..J....2.........F.......$1.T(su.h.]C.bq..$i.m6...r.<N.`i..V.g#'r5.7[.F..C...I$1.x....o'..... ..4...7.....1j?..8.q).j...[#7q2He.a.R.u...<.>h....G,U..d..P1.H8.2............+p..j..G.......\|?...0.X........* .aoR8...-...Ci..%...p..-l.......\..GLF.e....E.xd.O.(a"M.n..Q....QX.[P..=n....)..*.T..2...m...^..2..4...."....b...F.$t.U"..L.J#p..._.:K.&..~V...^/Em.K...x..;....6V..:t.^....~.\&...R.rm..}..t...~.g.....5.<+1.:........k...U.Z..$.DMQ..v.2.x6O......}.E........oO._..rvF.$...

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10963), with no line terminators
Category:	downloaded
Size (bytes):	10963
Entropy (8bit):	4.693187492665794
Encrypted:	false
SSDEEP:	192:oIwD8iXuE2IBitQKqL3OYqyvfdVMHTDEAf8siQaIfLcfSkPTEoRMB3nfuj77uILG:oIwD8iXu8i+SHn5NE3jvPFDsItDgiXdC
MD5:	443158064742E75B9A5760E136A827FD
SHA1:	B7F30352B3A3DB11C0E713846F812666F4283A59
SHA-256:	BC569FBB52C8C177308BEAA6839CE3B0A8901630A973B2DA0506FF2660E307DF
SHA-512:	712845980ADB77AE7898297E2CC7C10148FA52C9CEBB7471F9031FC4FF3276D1A90612C3EB944F9FE2CE009C56BABBC9FB554E07CAA2F1E047B7D13B3E737980
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_53bb9be00eefe2d488bac3248bef5ef9.css
Preview:	body,.rooms-v6 .entry-body .entry-price,.rooms-v1 .entry-body .entry-price,.copyright,.rooms-v3 .entry-price .wceb-price-format,.page-breadcrumb .element a,.sidebar a,.single .product .entry-header .price .wceb-price-format,.single .product .entry-header .price del,.single .product .entry-body .entry-meta label,.widget.products .price del,.widget.products .price .wceb-price-format,.availability-form .cart .price del,.maps .info,.dropdown-menu li a,.single-hotel .availability-form{color:#666}.rooms-v6 .flickity-page-dots li:before,.posts.v1 .entry-meta,.availability.style-v1 .section-header .section-subtitle,.leevio-maps.style-v2 .slider-flickity-main .entry-body,.testimonial.style-v2 .slider-flickity-main .entry-title small,.posts.v2 .entry-meta a,.posts.v2 .entry-comment,.testimonial.style-v3 small,.testimonial.style-v4 small,.rooms .entry-rating,.rooms-slider.style-v3 .entry-price del,.header-middle-right .menu a,.rooms-v4 .entry-meta,.rooms-v4 .entry-date,.archive-hotel.style-v3 .en

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 30x20, components 3
Category:	dropped
Size (bytes):	624
Entropy (8bit):	6.488544814082784
Encrypted:	false
SSDEEP:	12:VvI4wEXB+4OQ72KuXudlozD6grRyucuNPlWGzt8:tbFgoFTXc6gdtpEGzt8
MD5:	E1B638B4D7CFB1D62744AF6AC58E9D19
SHA1:	C0FBF7241F60F343CA9CDE8AC84FD4E0AEAD325A
SHA-256:	D803B0AEBDEE0DC5A9DAD891B642D2B2D9CF4A81F4D192C530141EA1460B69D6
SHA-512:	44C3CCC79EBF76A269A7BB4889DD8418C0E5783D65FBDBF26A6A5BFB3EA54C31BEFD0BD90CAAA695F979565B07B6FEBB64214CE1C6B1337043EE1BCBC0E03D3B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<......Adobe.d.................................................................................................................................................................{....................................................................1.!..A.aq."...R#....................!...1a....A."q#..............?...\tr..zV<....R\|k.d..D...Y.)&r.#i:...h.5...J.k.....w..i.O...Qnk..p;.......0(..@.!.Z...5G+I.64.DD-k.}..`..g3;.y.$-....$].P.YN..H.M.'.psW....4I....r..Mqpv@.L...f.*.....,v?..p.....5.'D.=...\..A$.:U..a.'..PA...o.q.......gw...:k....).j..]<..M..HX..P,.~.7......?f...../...

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	116626
Entropy (8bit):	5.314064424673953
Encrypted:	false
SSDEEP:	1536:KIa32TJeAoplAHv8HK1zT6vffuLaU52xe:1a32TJefde
MD5:	F82927E92C82D88D8865F703725D0FB7
SHA1:	62A4CFCC8077F7800F7D03CEF6BD5233E4B7CB08
SHA-256:	6955EEA2186084A4F620F12E3CBCC01417B1318D5A84247F6FDF469B04EFF065
SHA-512:	DB68DEC09285C230A704385F95B16361B67E09921C4396A3D550A234F073C7D6AB834C61F4C18FE6B9393170B9D12FCD11989BB4DC2CFF1BE6BDE2787131CAF5
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_137587eed1343d99006b52fed3152293.css
Preview:	#yui3-css-stamp.cssreset{display:none}.rs-carousel-mask{overflow:hidden}.rs-carousel-runner{position:relative;height:100%}.rs-carousel-horizontal .rs-carousel-item{float:left}.rs-carousel-mask{position:relative}.rs-carousel-runner{-moz-transform:translate3d(0,0,0);-webkit-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}.rs-carousel-transition .rs-carousel-runner{-moz-transition:-moz-transform .4s ease;-webkit-transition:-webkit-transform .4s ease;-o-transition:-o-transform .4s ease;-ms-transition:-ms-transform .4s ease;transition:transform .4s ease}.rs-carousel.large-arrows .rs-carousel-action{position:absolute;top:50%;background-image:url(//senacruises.com/wp-content/themes/senacruises/rooms/../images/icons.png);text-indent:-99999px;height:29px;width:16px;margin-top:-15px;display:block;z-index:5;opacity:0;-webkit-transition:opacity .3s ease-in;-moz-transition:opacity .3s ease-in;transition:opacity .3s ease-in;f

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	40170
Entropy (8bit):	5.472951583480685
Encrypted:	false
SSDEEP:	384:cn7/8n4etnHjwnFp+xWFfBG53GQ6AGC3/LxWG835tD0Gm3bfoYmnRBxDyRAgO/4n:b
MD5:	49EB46C89F764ED102C479A2D50149DB
SHA1:	5C8A2E5F05502122570E35EB6231C43000FD5EF4
SHA-256:	75796606316683B10CA74931859210C4B5F1A70FAEA977313484C2EA651859BD
SHA-512:	314185D59548F6E6C58AEA65B424B1BA83CDAF49A257DE718624150F244E6820F575C84784A67213F4B63F1400C10C609358B630897C1B1687CF46642D8F0267
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Oswald%3A200%2C300%2C400%2C500%2C600%2C700%26amp%3Bsubset%3Dcyrillic%2Clatin-ext%2Cvietnamese%7CChivo%3A300%2C300i%2C400%2C400i%2C700%2C700i%2C900%2C900i%26amp%3Bsubset%3Dlatin-ext%7CPoppins%3A300%2C400%2C500%2C600%2C700%7CPlayball%7CLibre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i&subset=latin%2Clatin-ext&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Chivo';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/chivo/v18/va9G4kzIxd1KFrBtce5flZDP.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Chivo';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/chivo/v18/va9G4kzIxd1KFrBtce9flZDP.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Chivo';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/chivo/v18/va9G4kzIxd1KFrBtceFflQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131,

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	4.266823615280524
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMysyxt8SFF9sllvkg1p:6v/lhPfZMysO82F9EBbp
MD5:	1BAF4938C47211962F059286BAF481B8
SHA1:	71ED93364B260307AB82747E2637C43D6F3D463E
SHA-256:	A0C1BB4B2B782D5FE3042E951FE7E51D178F8EB96C22246BAB8EEE03AEC046A5
SHA-512:	284646F39B1E331F42A6A765DC6EB495BEAEC5D516F545191B9B23C97011AADD8A30EC45132B84DD90CDA540A6FD4DD11A6CAAA3D4056014DF30165215818427
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/images/bg-header.png
Preview:	.PNG........IHDR....................IDAT..c```.......a.v.....IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28824)
Category:	downloaded
Size (bytes):	28986
Entropy (8bit):	4.749691483411781
Encrypted:	false
SSDEEP:	384:nKZyDDVUKW+KZKJ5Ne2QYvB+fx1UaE6l+yQ/QdmwM:Vyr+KZK3Iacfx1Uz6l+yQ/SE
MD5:	D9A402AA7576B96F5F6390D92C82EF44
SHA1:	AA933AC7F3BA3169FC6A399014EDDB2A79BC494C
SHA-256:	5ABE21F898D69CCC30A452D02B70A828D111204B7C898709C4E74D0620E79451
SHA-512:	9AB6C4A0D0BA67A25E3226824C88101FCD094FF2580B030F4AB651699BD6F9303BED88318858098B06BD3CC3B6EC7C6B96F38E2C9A0B1E59D4CE8CC62C0BE3F8
Malicious:	false
Reputation:	low
URL:	https://senacruises.com/wp-content/themes/senacruises/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.6.3 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */.fa.fa-pull-left,.fa.pull-left{margin-right:.3em}.fa,.fa-stack{display:inline-block}.fa-fw,.fa-li{text-align:center}@font-face{font-family:FontAwesome;src:url(../fonts/fontawesome-webfont.eot?v=4.6.3);src:url(../fonts/fontawesome-webfont.eot?#iefix&v=4.6.3) format('embedded-opentype'),url(../fonts/fontawesome-webfont.woff2?v=4.6.3) format('woff2'),url(../fonts/fontawesome-webfont.woff?v=4.6.3) format('woff'),url(../fonts/fontawesome-webfont.ttf?v=4.6.3) format('truetype'),url(../fonts/fontawesome-webfont.svg?v=4.6.3#fontawesomeregular) format('svg');font-weight:400;font-style:normal}.fa{font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 12:53:03.742033005 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 11, 2024 12:53:05.167553902 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:05.167848110 CEST	49736	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:05.172487974 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:05.172688961 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:05.172748089 CEST	80	49736	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:05.173084021 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:05.173100948 CEST	49736	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:05.178206921 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:07.499017954 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:07.549634933 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:07.727973938 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:07.728023052 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:07.728096008 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:07.728482962 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:07.728494883 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:08.045574903 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:08.045614958 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:08.045711040 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:08.045959949 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:08.045986891 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:08.195915937 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:08.196001053 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:08.196073055 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:08.197413921 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:08.197448969 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:08.374727011 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:08.375011921 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:08.375029087 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:08.376466990 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:08.376538038 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:08.377969980 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:08.378038883 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:08.424350023 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:08.424360037 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:08.470427990 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:08.957547903 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:08.957631111 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:08.960612059 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:08.960637093 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:08.961136103 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:08.997337103 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.039426088 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.202580929 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.202723026 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.202786922 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.202786922 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.202851057 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.202883959 CEST	49741	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.202899933 CEST	443	49741	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.240320921 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.240376949 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.240454912 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.240686893 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.240700006 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.858885050 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.858973980 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.860126972 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.860153913 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.860696077 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:09.861643076 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:09.903420925 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:10.107168913 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:10.107312918 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:10.107368946 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:10.108216047 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:10.108251095 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:10.108275890 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 11, 2024 12:53:10.108292103 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 11, 2024 12:53:10.847320080 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:10.847572088 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:10.847596884 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:10.849198103 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:10.849720955 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:10.852888107 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:10.852977991 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:10.853108883 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:10.853116035 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:10.892287970 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:12.848731995 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:12.848813057 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:12.848824978 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:12.848871946 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:12.848999977 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:12.849046946 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:12.849369049 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:12.898016930 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:12.898031950 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:12.946014881 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:13.646275043 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:13.953876019 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.568990946 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.576406002 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.576440096 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.576467037 CEST	80	49735	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.576527119 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.576567888 CEST	49735	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.627073050 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.627106905 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.627145052 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.627146959 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.627167940 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.627192974 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.627248049 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.680948973 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.680958033 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.728956938 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.863496065 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.863528967 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.863549948 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.863564014 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.863607883 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.863615990 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.905073881 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:14.905092955 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:14.952948093 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.693744898 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.693778992 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.693799019 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.693918943 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.693918943 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.693955898 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.713125944 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.713174105 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.713252068 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.714369059 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.714456081 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.714541912 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.716099977 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.716187954 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.716679096 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.716706991 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.716732025 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.716797113 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.724895954 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.724935055 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.725282907 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.725368023 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.725471973 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.727102041 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.727179050 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.727488995 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.727523088 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.728636980 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.728661060 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.728889942 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.728918076 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.735354900 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:15.735395908 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:15.783334970 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:16.030041933 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:16.030076981 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:16.030116081 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:16.030139923 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:16.030183077 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:16.162753105 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:16.204036951 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:16.204063892 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:16.251223087 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:17.506983042 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:17.507018089 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:17.507055044 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:17.507065058 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:17.507114887 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:17.507139921 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:17.562658072 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:17.562684059 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:17.615277052 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.193048000 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.193310022 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.193331003 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.197222948 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.197294950 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.197670937 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.197849989 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.197895050 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.198122978 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.237440109 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.237457991 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.285480976 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.419504881 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:18.419560909 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:18.419672966 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:18.646687031 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.648102999 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.648127079 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.649075985 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.649147987 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.649693966 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.649760962 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.649857044 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:18.649872065 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:18.693056107 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:19.644537926 CEST	49739	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:53:19.644565105 CEST	443	49739	216.58.212.132	192.168.2.4
Oct 11, 2024 12:53:19.762754917 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:19.763142109 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:19.763202906 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:19.764759064 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:19.765537024 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:19.765696049 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:19.765726089 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:19.766022921 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:19.816912889 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.138019085 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.186728001 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.509624958 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.510010004 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.510071039 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.511764050 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.511954069 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.512181997 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.512337923 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.512363911 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.512423992 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.565445900 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.565505981 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.585273981 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.585526943 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.585556984 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.586999893 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.587413073 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.587532997 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.587616920 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:20.611417055 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:20.642036915 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:21.030729055 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:21.030762911 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:21.030798912 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:21.030823946 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:21.030855894 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:21.030880928 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:21.030889988 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:21.077081919 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:21.722584963 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:21.765408993 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:22.838962078 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:22.869960070 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:22.881160021 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:22.912725925 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.104319096 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.104351997 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.104399920 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.104418993 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.104437113 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.104440928 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.104441881 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.104513884 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.104564905 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.104566097 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.104566097 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.104566097 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.362379074 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.408528090 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.471862078 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.471903086 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.471941948 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.471952915 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.471998930 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.472035885 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.517326117 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:23.517333031 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:23.565028906 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:25.496417999 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:25.496448994 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:25.496511936 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:25.496519089 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:25.496567011 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:25.496567011 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:25.496577978 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:25.549787045 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:25.549793959 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:25.596386909 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:26.266685963 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:26.266752958 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:26.266777992 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:26.266849995 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:26.267833948 CEST	49746	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:26.267878056 CEST	443	49746	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:26.269783974 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:26.269821882 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:26.270021915 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:26.272660017 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:26.272675037 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.500709057 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.500722885 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.500791073 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.500816107 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.500844955 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.500900030 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.500932932 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.500966072 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.500966072 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.500966072 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.501008034 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.585732937 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.585768938 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.585808039 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.585820913 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.585872889 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.585906982 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.628958941 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.628967047 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.672355890 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.794102907 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.794137001 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.794154882 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.794194937 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.794203997 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.794224024 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.794281006 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.794323921 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.794325113 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.794325113 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:27.794346094 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:27.794459105 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:28.025151014 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:28.025187016 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:28.025238037 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:28.025248051 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:28.025310993 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:28.025345087 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:28.025345087 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:28.025362015 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:28.025418043 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:29.504371881 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.504404068 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.504451036 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.504467964 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:29.504520893 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.504556894 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:29.504556894 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:29.504574060 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.504614115 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:29.554812908 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.554851055 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.555018902 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:29.555071115 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:29.555072069 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:29.555109024 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.369163990 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.369402885 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.369422913 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.369889975 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.370264053 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.370351076 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.370451927 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.415402889 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.851876020 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.851898909 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.851919889 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.852003098 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.852076054 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.852076054 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.852427006 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.852826118 CEST	49747	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.852890015 CEST	443	49747	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.853240967 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.853287935 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:30.853714943 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.853997946 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:30.854016066 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.880207062 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.880242109 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.880280018 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.880281925 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.880310059 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.880332947 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.880352020 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.923763990 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.923800945 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.923851013 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.923860073 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.923930883 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.923969984 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.923969984 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.923989058 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.924027920 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.929199934 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:31.929214954 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:31.974337101 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.335549116 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.335565090 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.335638046 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.335781097 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.335781097 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.335846901 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.335915089 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.343115091 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.343144894 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.343179941 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.343192101 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.343220949 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.343226910 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.343233109 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.343247890 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.343276978 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.343278885 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.343297005 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:32.343297958 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:32.343338966 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:33.321700096 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.321737051 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.321785927 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.321793079 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:33.321857929 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.321892977 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:33.321892977 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:33.321911097 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.322328091 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:33.707155943 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.707173109 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.707246065 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.707258940 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:33.707329035 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:33.707365990 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:33.707423925 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.450304985 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.450337887 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.450377941 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.450378895 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.450407028 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.450429916 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.450465918 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.496567011 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.496582985 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.496633053 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.496654034 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.496689081 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.496714115 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.496743917 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.499017954 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:34.499022007 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:34.546144962 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.002240896 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.002614975 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.002679110 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.003164053 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.003555059 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.003647089 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.003685951 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.046587944 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.046618938 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.198791027 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.198803902 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.198867083 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.199038029 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.199100971 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.199153900 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.199496984 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:35.841332912 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:35.883862972 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.222877026 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.222963095 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.223335028 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.223372936 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.223490953 CEST	443	49756	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.223562002 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.223562002 CEST	49756	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.223769903 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.223865986 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.223994017 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.224442959 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.224478960 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.488559961 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.488576889 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.488632917 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.488646030 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.488708973 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.488841057 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.489042044 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.489042044 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.489052057 CEST	443	49740	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.489468098 CEST	49740	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.489659071 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.489694118 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.489761114 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.490485907 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.490503073 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.836848021 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.890927076 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.938885927 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.938899994 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.938985109 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.939096928 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.939097881 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:36.939163923 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:36.939234972 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:37.675111055 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:37.675147057 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:37.675196886 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:37.675249100 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:37.675249100 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:37.675318003 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:37.675357103 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:37.675380945 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:37.675951004 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.745512009 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.745542049 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.745558977 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.745660067 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.745698929 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.745722055 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.745722055 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.745722055 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.745722055 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.745796919 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.745846987 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.745882988 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.745908022 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.759274006 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.759530067 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.759589911 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.759876013 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.760777950 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.760838032 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:38.761082888 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:38.807394981 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.351035118 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.351068020 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.351116896 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.351125002 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.351178885 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.351210117 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.351211071 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.351227045 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.351286888 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.585836887 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.633536100 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.850589991 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.850615978 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.850661039 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.850802898 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.850802898 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.850802898 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:39.850872993 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.850914001 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:39.851011038 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.450223923 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.450258970 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.450297117 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.450324059 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.450324059 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.450341940 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.450355053 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.450355053 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.450378895 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.450412035 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.450422049 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.450434923 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.450567007 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.451446056 CEST	49743	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.451457024 CEST	443	49743	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.451925039 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.451956034 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.452014923 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.452908039 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.452924013 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.525350094 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.525782108 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.525795937 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.526904106 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.527816057 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.527990103 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.528168917 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.575397015 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.924921036 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.924954891 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.925004959 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.925024986 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.925086021 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:40.925122023 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:40.925143003 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.147404909 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.147422075 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.147459984 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.147598982 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.147598982 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.147667885 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.147711992 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.147973061 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.247966051 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.247999907 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.248053074 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.248205900 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.248205900 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.248205900 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.248274088 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.248318911 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.248646975 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.912969112 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.912986994 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.913023949 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.913047075 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.913163900 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.913163900 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:41.913233042 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:41.913296938 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:42.295703888 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:42.295722008 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:42.295805931 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:42.295955896 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:42.295957088 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:42.296566010 CEST	49757	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:42.296629906 CEST	443	49757	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:42.299591064 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:42.299679041 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:42.299762011 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:42.300137043 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:42.300205946 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:42.523935080 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:42.565116882 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.110163927 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.110194921 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.110239983 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.110266924 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.110332012 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.110373020 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.110373020 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.110393047 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.110532045 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.276323080 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.276336908 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.276380062 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.276634932 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.276700974 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.276762962 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.728193998 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.728354931 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.728389025 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.728477001 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.728787899 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.728787899 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.728830099 CEST	443	49744	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.728900909 CEST	49744	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.729248047 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.729336023 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:43.729454041 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.729872942 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:43.729909897 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.732136011 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.732503891 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:44.732521057 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.732991934 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.733278990 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:44.733371019 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.733405113 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:44.779397964 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.780165911 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:44.860152006 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.860483885 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:44.860547066 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.861648083 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.862080097 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:44.862080097 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:44.862121105 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.862263918 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:44.904375076 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.072309971 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.072341919 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.072388887 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.072400093 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.072470903 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.072508097 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.072508097 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.072527885 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.072577953 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.587919950 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.640836954 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.642575979 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.689338923 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.805835962 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.805850029 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.805892944 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.806025028 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.806025982 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.806025982 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:45.806099892 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.806143999 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:45.806206942 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.519095898 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.519479036 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.519541025 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.523057938 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.523153067 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.523473024 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.523648977 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.523653984 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.566152096 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.566211939 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.614325047 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.811666965 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.811701059 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.811781883 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.811781883 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.811805964 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.811870098 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.812073946 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.812658072 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.812679052 CEST	443	49759	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.812722921 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.812722921 CEST	49759	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.813219070 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.813249111 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:46.813360929 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.814074993 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:46.814095974 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:47.201354980 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:47.201370001 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:47.201430082 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:47.201484919 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:47.201484919 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:47.201550961 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:47.201622009 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.286936998 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.286969900 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.287014961 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.287046909 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.287074089 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.287079096 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.287102938 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.287121058 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.316200972 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.316291094 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.316309929 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.316323996 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.316358089 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.316361904 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.316395044 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.316495895 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.316508055 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.316554070 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.316850901 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.317033052 CEST	49760	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.317049980 CEST	443	49760	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.317405939 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.317451000 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:48.317548990 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.318958998 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:48.318973064 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.331443071 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.331458092 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.331487894 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.331671000 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.331671953 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.331738949 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.331815004 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.619299889 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.619586945 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.619597912 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.621117115 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.621599913 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.621599913 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.622006893 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.674911976 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.939584017 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.939619064 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.939749956 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.939749956 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.939815998 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.940464973 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.940619946 CEST	443	49761	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.940736055 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.940778971 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:49.940798044 CEST	49761	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.940840006 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.941559076 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:49.941572905 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.055846930 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.099824905 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.177517891 CEST	49736	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.182485104 CEST	80	49736	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.539166927 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.539249897 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.539403915 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.539405107 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.539877892 CEST	49758	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.539940119 CEST	443	49758	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.540061951 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.540090084 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.540148973 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.540716887 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.540728092 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.584652901 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.630614042 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.653920889 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.653954983 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.654012918 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.654079914 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.654114008 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.654129982 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.654158115 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.654176950 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.980880976 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.981647968 CEST	443	49762	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.981904030 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.981904030 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.981904984 CEST	49762	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.982135057 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.982217073 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:50.982285976 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.982964039 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:50.982996941 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.495592117 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.496133089 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.496201992 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.497324944 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.498152971 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.498337030 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.498486042 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.543426991 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.724215031 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.724246025 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.724292994 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.724301100 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.724329948 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.724345922 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.724370956 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.909745932 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.909785032 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.909820080 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.909868002 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.910434961 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.910532951 CEST	443	49763	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.910604954 CEST	49763	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.910741091 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.910834074 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:52.910996914 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.911431074 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:52.911468983 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.311592102 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.333622932 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.333947897 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:53.333966017 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.335411072 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.335483074 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:53.336138964 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:53.336204052 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.336433887 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:53.358925104 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:53.379432917 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.391427040 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:53.391447067 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:53.436810017 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.490333080 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.490366936 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.490412951 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.490416050 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.490437031 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.490449905 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.490470886 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.490474939 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.490520000 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.603072882 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.603583097 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.603596926 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.605022907 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.605207920 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.605781078 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.605945110 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.606379032 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:54.606384993 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:54.658354998 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:55.320394039 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:55.361728907 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:55.558621883 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:55.602607012 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:56.806217909 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:56.806251049 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:56.806299925 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:56.806310892 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:56.806381941 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:56.806422949 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:56.806422949 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:56.806442976 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:56.806669950 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.462949038 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.463310957 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.463346958 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.464790106 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.464869022 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.465172052 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.465261936 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.465292931 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.495734930 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.495744944 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.495810032 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.495825052 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.495831013 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.495876074 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.495877981 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.495883942 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.495930910 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.507424116 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.509973049 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.509989977 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.565061092 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.689963102 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.690213919 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.690272093 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.690745115 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.691070080 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.691159964 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:57.691183090 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.734725952 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:57.734741926 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:58.315700054 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:58.315788031 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:58.315874100 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:58.316464901 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:58.316492081 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:58.920357943 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:58.920366049 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:58.920543909 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:58.920610905 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:58.920610905 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:58.921308994 CEST	49766	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:58.921317101 CEST	443	49766	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:58.921894073 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:58.921972990 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:58.922055006 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:58.922961950 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:58.922996044 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:58.978312969 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:58.978528023 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:58.979703903 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:58.979717970 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:58.980113029 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:58.988256931 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.035409927 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.105168104 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.105226040 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.105269909 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.105309010 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.105341911 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.105366945 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.105422974 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.185611010 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.185676098 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.185712099 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.185749054 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.185776949 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.185796976 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.191695929 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.191766024 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.191801071 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.191837072 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.191863060 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.191920042 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.271362066 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.271472931 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.271507025 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.271545887 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.271572113 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.271625042 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.272383928 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.272428036 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.272468090 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.272480965 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.272511959 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.272532940 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.274204969 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.274255037 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.274285078 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.274296045 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.274324894 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.274344921 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.278511047 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.278563023 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.278593063 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.278604031 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.278630018 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.278652906 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.340181112 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:59.340210915 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:59.340265989 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:59.340302944 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:59.340349913 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:59.340349913 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:59.340349913 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:59.340394020 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:59.340404034 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:53:59.340420961 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:59.340445042 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:53:59.358016014 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.358084917 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.358125925 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.358164072 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.358190060 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.358345985 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.358788967 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.358833075 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.358858109 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.358880043 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.358894110 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.358926058 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.359543085 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.359564066 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.359607935 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.359613895 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.359636068 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.359648943 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.360449076 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.360471010 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.360534906 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.360541105 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.360579967 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.361291885 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.361316919 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.361362934 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.361368895 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.361403942 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.361414909 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.362365961 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.362389088 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.362433910 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.362438917 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.362456083 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.362598896 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.362986088 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.363074064 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.363085985 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.363128901 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.363219976 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.363233089 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.363245964 CEST	49770	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.363251925 CEST	443	49770	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.405008078 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.405049086 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.405172110 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.405318975 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.405337095 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.405400038 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.406982899 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.406989098 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.407058954 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.407372952 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.407403946 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.407522917 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.407532930 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.408499002 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.408521891 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.408601046 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.408690929 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.408705950 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.408864975 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.408873081 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.411457062 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.411545992 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:53:59.411624908 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.411747932 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:53:59.411768913 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.071369886 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.072098017 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.072798967 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.072848082 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.073260069 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.073271990 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.074806929 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.075158119 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.075182915 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.075520992 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.075525045 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.079894066 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.080203056 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.080286026 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.080538988 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.080554008 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.080651999 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.080683947 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.080728054 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.080733061 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.080754995 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.080769062 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.080787897 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.080795050 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.080800056 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.080840111 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.081387043 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.081398964 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.081695080 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.081698895 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.090565920 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.090847015 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.090874910 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.091176987 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.091187954 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.114362955 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.179842949 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.179985046 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.180048943 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.180222988 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.180248022 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.180279016 CEST	49776	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.180295944 CEST	443	49776	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.182967901 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.183053017 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.183186054 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.183358908 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.183360100 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.183391094 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.183445930 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.183562040 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.183568954 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.183614969 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.183697939 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.183697939 CEST	49773	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.183713913 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.183725119 CEST	443	49773	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.185806990 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.185827017 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.185898066 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.186069012 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.186093092 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.189574003 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.189620018 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.189696074 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.189727068 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.189806938 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.189857960 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.189857960 CEST	49775	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.189898968 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.189924955 CEST	443	49775	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.190535069 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.190577030 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.190630913 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.190639019 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.190691948 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.190751076 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.190874100 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.190880060 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.190888882 CEST	49774	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.190892935 CEST	443	49774	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.192563057 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.192605019 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.192683935 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.192806959 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.192890882 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.192899942 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.192919970 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.192961931 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.193062067 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.193093061 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.203772068 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.203912973 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.204163074 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.204299927 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.204299927 CEST	49772	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.204313993 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.204332113 CEST	443	49772	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.206013918 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.206084967 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.206156015 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.206280947 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.206315041 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.736073971 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.736085892 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.736115932 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.736180067 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.736258030 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:00.736298084 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.736320972 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:00.849720955 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.850157976 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.850193977 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.850565910 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.850574017 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.855751038 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.856050014 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.856076956 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.856355906 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.856362104 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.869503975 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.869679928 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.869812965 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.869827986 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.869929075 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.870116949 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.870173931 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.870187044 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.870192051 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.870465040 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.870477915 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.870621920 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.870681047 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.870990992 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.871005058 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965003967 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965065956 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965142012 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.965194941 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965270042 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.965289116 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965306997 CEST	49779	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.965312958 CEST	443	49779	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965348005 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965496063 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.965540886 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.965540886 CEST	49778	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.965553045 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.965564013 CEST	443	49778	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.967818022 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.967900991 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.967900038 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.967958927 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.967989922 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.968014956 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.968131065 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.968136072 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.968158960 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.968168974 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.979460955 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.979609966 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.979666948 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.979713917 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.979713917 CEST	49781	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.979737043 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.979760885 CEST	443	49781	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.979810953 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.979954004 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.980046034 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.980088949 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.980088949 CEST	49780	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.980110884 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.980132103 CEST	443	49780	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.980597973 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.980735064 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.980899096 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.980987072 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.980998993 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.981010914 CEST	49777	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.981018066 CEST	443	49777	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.982235909 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.982266903 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.982383966 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.982544899 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.982561111 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.982788086 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.982878923 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.982956886 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.983055115 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.983081102 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.983453989 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.983475924 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:00.983695984 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.983823061 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:00.983848095 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.623508930 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.623964071 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.624026060 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.624329090 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.624344110 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.638253927 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.638639927 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.638669968 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.638962030 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.638967037 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.641344070 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.641695976 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.641731977 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.641901016 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.641906977 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.648437977 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.648761988 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.648787022 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.649130106 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.649133921 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.655719995 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.656044006 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.656076908 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.656636953 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.656649113 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.729449987 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.729590893 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.729703903 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.729779959 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.729779959 CEST	49782	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.729823112 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.729851007 CEST	443	49782	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.732419968 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.732439995 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.732511044 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.732661963 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.732673883 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.749492884 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.749639988 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.750107050 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.750226974 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.750226974 CEST	49785	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.750276089 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.750303984 CEST	443	49785	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.752176046 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.752258062 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.752345085 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.752473116 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.752506018 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.755058050 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.755201101 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.755317926 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.755358934 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.755374908 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.755417109 CEST	49783	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.755424023 CEST	443	49783	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.757112026 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.757137060 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.757189989 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.757282019 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.757292032 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.759453058 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.759587049 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.759641886 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.759670973 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.759679079 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.759689093 CEST	49784	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.759692907 CEST	443	49784	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.761389017 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.761395931 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.761569977 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.761693001 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.761702061 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.771964073 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.772109032 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.772233963 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.772267103 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.772279024 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.772304058 CEST	49786	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.772317886 CEST	443	49786	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.773833990 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.773880959 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.773952961 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.774076939 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:01.774106026 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:01.997029066 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:01.997060061 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:01.997108936 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:01.997112036 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:01.997246981 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:01.997308969 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:01.997689962 CEST	49765	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:01.997698069 CEST	443	49765	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:01.998017073 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:01.998038054 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:01.998111963 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:01.998732090 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:01.998742104 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:02.393547058 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.394236088 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.394253016 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.394718885 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.394723892 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.418811083 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.419177055 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.419262886 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.419477940 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.419487000 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.420219898 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.420458078 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.420473099 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.420713902 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.420717955 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.425246954 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.425520897 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.425533056 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.425884962 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.425889969 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.429938078 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.430277109 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.430298090 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.430567980 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.430579901 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.501600981 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.501735926 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.501796007 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.501838923 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.501847029 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.501857996 CEST	49787	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.501862049 CEST	443	49787	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.504404068 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.504477978 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.504550934 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.504673958 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.504705906 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.528717995 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.528866053 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.528979063 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.528980017 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.529057026 CEST	49788	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.529093981 CEST	443	49788	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.529711008 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.529840946 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.529886961 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.529944897 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.529956102 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.530046940 CEST	49790	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.530050993 CEST	443	49790	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.531379938 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.531433105 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.531497002 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.531637907 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.531662941 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.532639027 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.532736063 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.532911062 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.533071041 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.533107996 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.534888029 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.535022974 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.535090923 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.535157919 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.535157919 CEST	49789	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.535162926 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.535170078 CEST	443	49789	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.537141085 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.537198067 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.537328005 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.537451029 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.537473917 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.538769960 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.538913965 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.538989067 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.539050102 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.539050102 CEST	49791	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.539076090 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.539100885 CEST	443	49791	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.540638924 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.540676117 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.540798903 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.540956974 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:02.540970087 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:02.547914028 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:02.547929049 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:02.547957897 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:02.548094988 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:02.548094988 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:02.548122883 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:02.548173904 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.006124020 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.006154060 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.006201982 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.006211996 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.006233931 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.006246090 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.006251097 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.006267071 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.006283045 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.175652027 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.199671030 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.202852964 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.219820976 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.220664024 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.227932930 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.241760015 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.241784096 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.242777109 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.242780924 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.243057013 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.243084908 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.243860006 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.243870020 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.244462967 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.244472027 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.244945049 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.244954109 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.245254993 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.245347977 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.245981932 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.245995045 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.246475935 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.246537924 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.247183084 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.247200012 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.349998951 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.350147009 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.350390911 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.350390911 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.350390911 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.350615025 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.350814104 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.350879908 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.350935936 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.350963116 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.350990057 CEST	49794	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.351005077 CEST	443	49794	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.351696968 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.351723909 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.351864100 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.351887941 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.351953983 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.351969957 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.351969957 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.351993084 CEST	49797	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.352004051 CEST	443	49797	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.352770090 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.352770090 CEST	49793	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.352786064 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.352811098 CEST	443	49793	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.353641987 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.353811026 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.353888035 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354229927 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354276896 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.354310989 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354340076 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.354347944 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354412079 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354609013 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354623079 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.354754925 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354756117 CEST	49796	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.354778051 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.354788065 CEST	443	49796	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.355199099 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.355257988 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.355503082 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.355632067 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.355660915 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.356400013 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.356426954 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.356575966 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.356642962 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.356673956 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.356729031 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.356754065 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.356864929 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.356880903 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.356955051 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.357110977 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.357129097 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:03.556981087 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.557251930 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.557320118 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.557622910 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.557912111 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.557975054 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.558033943 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:03.603403091 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:03.654459000 CEST	49795	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:03.654499054 CEST	443	49795	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.019911051 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.020368099 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.020409107 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.020833969 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.020843029 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.020982027 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.021270990 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.021291018 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.021478891 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.021634102 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.021637917 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.021748066 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.021787882 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.022022009 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.022028923 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.024635077 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.024974108 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.024993896 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.025269985 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.025275946 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.043848991 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.044137001 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.044151068 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.044470072 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.044473886 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.059070110 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.113949060 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.127567053 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.127717018 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.127799034 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.127878904 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.127878904 CEST	49802	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.127919912 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.127947092 CEST	443	49802	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.129352093 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.129489899 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.129718065 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.129853964 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.129873037 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.129883051 CEST	49803	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.129888058 CEST	443	49803	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.130825996 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.130899906 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.131067991 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.131375074 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.131419897 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.131730080 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.131759882 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.131814003 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.131956100 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.131968975 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.135797977 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.135940075 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.136032104 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.136075020 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.136090040 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.136117935 CEST	49801	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.136131048 CEST	443	49801	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.137686014 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.137691975 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.137742043 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.137861013 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.137871027 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.139925003 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.140070915 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.140281916 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.140347958 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.140347958 CEST	49799	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.140381098 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.140440941 CEST	443	49799	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.141985893 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.142010927 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.142164946 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.142291069 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.142316103 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.155251026 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.155375004 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.155424118 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.155448914 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.155461073 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.155471087 CEST	49800	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.155473948 CEST	443	49800	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.157509089 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.157537937 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.157746077 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.157960892 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.157974005 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.316952944 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.316968918 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.316993952 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.317022085 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.317037106 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.317058086 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.317080021 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.340481997 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.340511084 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.340579033 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.340579987 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.340636969 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.340671062 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.340691090 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.386931896 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.386959076 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.387002945 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.387089014 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.387150049 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.387605906 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.387607098 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.387640953 CEST	443	49767	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.387787104 CEST	49767	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.387857914 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.387895107 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.387968063 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.388540030 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:04.388567924 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:04.807486057 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.808242083 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.808264971 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.809037924 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.809041977 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.810765028 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.811244965 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.811289072 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.811852932 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.811868906 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.829273939 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.830775023 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.830862045 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.831470013 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.831484079 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.839411020 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.839982033 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.839992046 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.840147972 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.840857983 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.840861082 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.841237068 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.841300011 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.841687918 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.841701031 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.918654919 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.918720961 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.918831110 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.919176102 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.919184923 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.919194937 CEST	49806	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.919198990 CEST	443	49806	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.921464920 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.921632051 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.921700954 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.924913883 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.924913883 CEST	49807	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.924962044 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.924989939 CEST	443	49807	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.928930044 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.928960085 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.929538965 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.929951906 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.930016994 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.930078030 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.930274010 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.930289984 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.930527925 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.930557966 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.940363884 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.940577030 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.941051006 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.941157103 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.941203117 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.941232920 CEST	49804	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.941247940 CEST	443	49804	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.943419933 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.943495035 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.943583965 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.943681955 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.943708897 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.951761961 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.951886892 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.951982975 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.952100039 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.952100039 CEST	49808	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.952124119 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.952145100 CEST	443	49808	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.953075886 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.953197002 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.953258038 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.955277920 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.955284119 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.955291033 CEST	49805	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.955293894 CEST	443	49805	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.958512068 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.958580971 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.958667040 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.959423065 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.959443092 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.959544897 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.959680080 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.959713936 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:04.959781885 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:04.959804058 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.537024021 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.537472963 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.537504911 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.537869930 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.537875891 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.538762093 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.582350016 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:05.612476110 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.612848043 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.612901926 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.613250017 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.613261938 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.618298054 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.618638992 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.618690968 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.619107008 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.619118929 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.619847059 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.620112896 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.620143890 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.620439053 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.620445013 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.645956993 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.646256924 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.646282911 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.646692038 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.646701097 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.653175116 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.653506041 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.653575897 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.653659105 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.653660059 CEST	49810	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.653697014 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.653722048 CEST	443	49810	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.656104088 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.656155109 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.656224012 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.656358004 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.656373978 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.731918097 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.732064009 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.732131004 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.732218981 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.732232094 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.732264996 CEST	49814	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.732269049 CEST	443	49814	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.733325958 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.733465910 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.733611107 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.733733892 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.733760118 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.733800888 CEST	49811	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.733814955 CEST	443	49811	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.735490084 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.735512018 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.735728025 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.736260891 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.736349106 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.736390114 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.736403942 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.736478090 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.736583948 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.736613989 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.757967949 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.758093119 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.758145094 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.758234978 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.758239031 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.758261919 CEST	49813	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.758265972 CEST	443	49813	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.759108067 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.759262085 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.759311914 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.759650946 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.759663105 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.759675980 CEST	49812	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.759681940 CEST	443	49812	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.761807919 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.761851072 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.761926889 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.762039900 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.762053013 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.762415886 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.762424946 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.762476921 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.762590885 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:05.762600899 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:05.778062105 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.778095007 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.778115034 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.778131962 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:05.778162003 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.778167009 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:05.778187990 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.778211117 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.778219938 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:05.778239965 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.778244972 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:05.778284073 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:05.816939116 CEST	49736	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:05.822295904 CEST	80	49736	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:05.822350025 CEST	49736	80	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.010499001 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.010921955 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.010938883 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.012058020 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.012756109 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.012928963 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.013434887 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.022881031 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.022914886 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.022963047 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.022964954 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.022991896 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.023016930 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.023049116 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.023076057 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.059427977 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.355724096 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.356498003 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.356544018 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.357265949 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.357276917 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.365677118 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.365710020 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.365757942 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.365803003 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.365803003 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.365832090 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.365847111 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:06.365858078 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.365885973 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:06.397165060 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.397913933 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.397950888 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.400835037 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.400849104 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.405117989 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.405488014 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.405513048 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.405955076 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.405960083 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.419841051 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.420331001 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.420366049 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.421030998 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.421041965 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.458873034 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.459664106 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.459695101 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.460192919 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.460197926 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.470990896 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.471183062 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.472866058 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.472866058 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.473042965 CEST	49815	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.473067045 CEST	443	49815	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.475856066 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.475939035 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.476888895 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.477056980 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.477076054 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.506963968 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.507111073 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.507368088 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.507514000 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.507514000 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.507539034 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.507549047 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.510875940 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.510926008 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.511066914 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.512778044 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.512793064 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.514142036 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.514213085 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.517028093 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.517107964 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.517107964 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.517121077 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.517131090 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.520422935 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.520440102 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.520508051 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.520678043 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.520699024 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.527842045 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.527919054 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.528922081 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.528923035 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.529105902 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.529144049 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.531490088 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.531574011 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.532895088 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.533232927 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.533271074 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.572748899 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.572947025 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.573113918 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.573139906 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.573139906 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.573151112 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.573158979 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.575984001 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.576066971 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:06.576266050 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.576507092 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:06.576529026 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.146934032 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.148066044 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.148149967 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.148922920 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.148976088 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.171049118 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.177855968 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.177881002 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.180222034 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.180246115 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.195678949 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.196295023 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.196357012 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.196940899 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.196957111 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.205832005 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.206809998 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.206876993 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.208381891 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.209055901 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.209261894 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.209266901 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.211554050 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.212023020 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.212038040 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.212690115 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.212694883 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.235373974 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.238238096 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.238322020 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.238955975 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.238976955 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.251051903 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.251076937 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.258470058 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.258615971 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.258794069 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.259013891 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.259061098 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.259095907 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.259111881 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.269958973 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.269989967 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.270148039 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.270596027 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.270606995 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.285697937 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.285857916 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.285912991 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.286027908 CEST	49821	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.286036015 CEST	443	49821	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.291198015 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.291207075 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.291467905 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.291690111 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.291699886 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.295964956 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.295975924 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.296051979 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.296060085 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.296135902 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.296169043 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.296190023 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.305975914 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.306138992 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.306210041 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.306504011 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.306504965 CEST	49823	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.306569099 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.306606054 CEST	443	49823	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.309998035 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.310045004 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.310189962 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.310483932 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.310518026 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.324636936 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.324783087 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.324856043 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.325087070 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.325094938 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.325107098 CEST	49822	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.325110912 CEST	443	49822	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.348061085 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.348088980 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.348190069 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.351824999 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.351838112 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.370038033 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.370179892 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.370364904 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.370479107 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.370518923 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.370556116 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.370572090 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.377964020 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.378057957 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.378294945 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.378501892 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.378551960 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.507005930 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.507038116 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.507087946 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.507100105 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.507168055 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.507209063 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.507209063 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.507246017 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.507298946 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.770538092 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:07.770620108 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:07.770695925 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:07.771008968 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:07.771047115 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:07.845948935 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.845980883 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.846028090 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.846172094 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.846172094 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.846214056 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.846232891 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.846272945 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:07.949932098 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.950562954 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.950589895 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.951527119 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.951539993 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.951616049 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.951997995 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.952012062 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.952677011 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.952682972 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.959286928 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:07.968420029 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.969151974 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.969238043 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:07.971369982 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:07.971385956 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.001467943 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.010505915 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.019996881 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.020602942 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.020627022 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.021239996 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.021244049 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.036807060 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.037425041 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.037462950 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.037986994 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.038002968 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.057735920 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.057867050 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.057924032 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.058183908 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.058197021 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.061861038 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.061877966 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.061938047 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.062571049 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.062570095 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.062580109 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.062760115 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.062865973 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.062927008 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.062927008 CEST	49825	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.062938929 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.062946081 CEST	443	49825	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.064336061 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.068281889 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.068367004 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.068839073 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.068939924 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.068963051 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.074872017 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.075020075 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.075186014 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.075273037 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.075316906 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.075351000 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.075366974 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.078069925 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.078151941 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.078365088 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.078530073 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.078566074 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.129095078 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.129211903 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.129266977 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.129297018 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.129303932 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.129312038 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.129316092 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.131227016 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.131308079 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.131413937 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.131524086 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.131547928 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.138829947 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.139143944 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.139238119 CEST	443	49809	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.139297962 CEST	49809	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.139595985 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.139678955 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.139799118 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.140135050 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.140172958 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.144417048 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.144556999 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.144608974 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.144656897 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.144656897 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.144694090 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.144716978 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.146337986 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.146420956 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.146492958 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.146584988 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.146606922 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.425935030 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:08.426208973 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:08.426268101 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:08.427798033 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:08.428165913 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:08.428353071 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:08.481225014 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:08.739680052 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.740166903 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.740242958 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.740653992 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.740668058 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.760696888 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.761008978 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.761035919 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.761343002 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.761347055 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.782953024 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.783323050 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.783380032 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.783713102 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.783729076 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.827940941 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.828366995 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.828399897 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.828696966 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.828706980 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.830033064 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.830321074 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.830380917 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.830712080 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.830723047 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.848581076 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.848711967 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.848823071 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.848875046 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.848875046 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.848906994 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.848929882 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.851176023 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.851243973 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.851327896 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.851464033 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.851485014 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.881850004 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.881998062 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.882081032 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.885231972 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.885241032 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.887990952 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.888037920 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.888204098 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.888339043 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.888358116 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.893733025 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.893872976 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.893944025 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.894011021 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.894011021 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.894033909 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.894043922 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.895915985 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.895983934 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.896051884 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.896152020 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.896171093 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.916948080 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.916955948 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.916996002 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.917026043 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.917041063 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.917074919 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.917108059 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.917108059 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.917138100 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.938791037 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.938936949 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.939045906 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.939091921 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.939112902 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.939140081 CEST	49836	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.939152956 CEST	443	49836	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.939970016 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.940149069 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.940211058 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.940304995 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.940304995 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.940321922 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.940341949 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.941392899 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.941490889 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.941572905 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.941740036 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.941780090 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.942075968 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.942090034 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.942156076 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.942277908 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:08.942289114 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:08.992850065 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.992883921 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.992928028 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.992940903 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.993005037 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.993005037 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.993037939 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.993107080 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.993197918 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.993402958 CEST	49764	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.993432045 CEST	443	49764	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.993746996 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.993782997 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:08.993885040 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.994429111 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:08.994457006 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.446429968 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.446458101 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.446500063 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.446531057 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.446578979 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.446611881 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.446705103 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.513588905 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.514142990 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.514187098 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.514568090 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.514620066 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.559798002 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.560343981 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.560424089 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.560776949 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.560797930 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.567445993 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.570074081 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.570168018 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.570481062 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.570496082 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.612471104 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.612799883 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.612833023 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.613156080 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.613162041 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.632265091 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.632422924 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.632617950 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.632751942 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.632752895 CEST	49837	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.632803917 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.632841110 CEST	443	49837	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.635827065 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.635919094 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.636001110 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.636152983 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.636189938 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.651262999 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.651684046 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.651716948 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.652122974 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.652178049 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.667273045 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.667285919 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.667356014 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.667381048 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.667488098 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.668845892 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.669018984 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.669220924 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.669222116 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.669222116 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.671053886 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.671077967 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.671192884 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.671322107 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.671329021 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.678195953 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.678337097 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.678400040 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.678450108 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.678450108 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.678483963 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.678512096 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.680104017 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.680190086 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.680358887 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.680474043 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.680499077 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.730731964 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.730885983 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.730962038 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.731002092 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.731002092 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.731015921 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.731029987 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.732862949 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.732948065 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.733032942 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.733320951 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.733401060 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.766519070 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.766624928 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.766810894 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.766812086 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.766812086 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.768506050 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.768520117 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.768580914 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.768739939 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.768750906 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:09.908237934 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.908292055 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.908358097 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.908545017 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:09.908569098 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:09.939281940 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 11, 2024 12:54:09.939423084 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 11, 2024 12:54:09.944720984 CEST	80	49723	93.184.221.240	192.168.2.4
Oct 11, 2024 12:54:09.944922924 CEST	49723	80	192.168.2.4	93.184.221.240
Oct 11, 2024 12:54:09.945120096 CEST	80	49724	93.184.221.240	192.168.2.4
Oct 11, 2024 12:54:09.945301056 CEST	49724	80	192.168.2.4	93.184.221.240
Oct 11, 2024 12:54:09.984270096 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:09.984293938 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.079618931 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.079689980 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.273595095 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.273629904 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.273798943 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.273797989 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:10.273798943 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:10.273893118 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.273936033 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.273966074 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:10.274327993 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:10.290626049 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.291246891 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.291280985 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.291644096 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.291657925 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.330077887 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.330621004 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.330636024 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.330926895 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.330939054 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.363656998 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.364051104 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.364131927 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.364423990 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.364438057 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.396944046 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.397387028 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.397469044 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.397598028 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.397614002 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.404305935 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.404459000 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.404733896 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.404983997 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.405030012 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.405060053 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.405076027 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.407622099 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.407696009 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.407815933 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.407922029 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.407941103 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.426939011 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.427222967 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.427242041 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.427578926 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.427589893 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.439066887 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.439208984 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.439354897 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.439393997 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.439393997 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.439407110 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.439414978 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.441268921 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.441293955 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.441401958 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.441519022 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.441533089 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.477567911 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.477709055 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.477766037 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.477845907 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.477845907 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.477888107 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.477900028 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.479624033 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.479708910 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.479857922 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.479959965 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.479991913 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.507544041 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.507607937 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.507729053 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.507805109 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.507805109 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.507844925 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.507877111 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.509852886 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.509938002 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.510035038 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.510153055 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.510204077 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.534436941 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.534579992 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.534634113 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.534682989 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.534682989 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.534691095 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.534698009 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.536441088 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.536525965 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.536765099 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.536879063 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:10.536901951 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:10.749133110 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.749149084 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.749326944 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:10.749326944 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:10.749365091 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.749444008 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.749485970 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:10.749516010 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:10.749741077 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.019596100 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.019917011 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.019978046 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.023945093 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.024147987 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.024475098 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.024475098 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.024558067 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.024918079 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.078057051 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.078531027 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.078591108 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.078915119 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.078982115 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.079437971 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.079452038 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.107018948 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.107353926 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.107403994 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.107700109 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.107709885 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.125917912 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.165036917 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.165462017 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.165546894 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.165836096 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.165890932 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.190233946 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.190299988 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.190450907 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.190502882 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.190502882 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.190540075 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.190562963 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.192862034 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.192958117 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.193037033 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.193202972 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.193232059 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.196326971 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.196650982 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.196685076 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.197091103 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.197103024 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.207077980 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.207566023 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.207644939 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.208157063 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.208210945 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.215796947 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.215944052 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.216010094 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.216042995 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.216058969 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.216082096 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.216094971 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.218245029 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.218331099 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.218416929 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.218734026 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.218820095 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.238518000 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.238560915 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.238631964 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.238647938 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.238702059 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.279057980 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.279149055 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.279361010 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.279361963 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.279361963 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.281969070 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.282052994 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.282131910 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.282279968 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.282310963 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.305296898 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.305437088 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.305490971 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.305556059 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.305556059 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.305592060 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.305617094 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.307606936 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.307687044 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.307787895 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.307929039 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.307952881 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.320714951 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.320771933 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.320844889 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.321116924 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.321118116 CEST	49852	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.321183920 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.321221113 CEST	443	49852	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.322715998 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.322736979 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.322873116 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.322998047 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.323021889 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.534931898 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.535206079 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.535269976 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.536757946 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.537069082 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.537187099 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.537199974 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.537261009 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.578047037 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.580162048 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.580224991 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.767734051 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.767762899 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.767812014 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.767848969 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.767915010 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.767950058 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.767976999 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.842581987 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.843173027 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.843233109 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.843800068 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.843816042 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.865185022 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.865197897 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.865276098 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.865315914 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:11.865394115 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:11.890362024 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.891472101 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.891551018 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.893994093 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.894047976 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.940505028 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.944835901 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.944911003 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.950380087 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.950397015 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.952832937 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.952883959 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.953011036 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.953027010 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.953378916 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.954257965 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.954293013 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.954375029 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.954391956 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.958710909 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.958767891 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.959141016 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.959460974 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.959491014 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.992595911 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.993063927 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.993112087 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.993606091 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.993618011 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.998549938 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.998992920 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.999022007 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:11.999583006 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:11.999592066 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.004007101 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.004154921 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.004261971 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.004419088 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.004419088 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.004461050 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.004487991 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.007328987 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.007441044 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.007564068 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.007883072 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.007961035 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.060554028 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.060739994 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.060818911 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.060892105 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.060892105 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.060933113 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.060961962 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.063843966 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.063896894 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.063987970 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.064137936 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.064169884 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.104089022 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.104208946 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.104285002 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.104304075 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.104362965 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.104470015 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.104517937 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.104543924 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.104543924 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.104563951 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.104585886 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.107822895 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.107851982 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.108072996 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.108238935 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.108253002 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.150954962 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.151015043 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.151084900 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.151113033 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.151139975 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.151174068 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.151221037 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.151397943 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.151398897 CEST	49858	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.151418924 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.151439905 CEST	443	49858	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.154017925 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.154102087 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.154215097 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.154526949 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.154606104 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.392451048 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.392853975 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.392919064 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.396845102 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.396944046 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.397429943 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.397612095 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.397849083 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.439568043 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.439587116 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.487065077 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.592006922 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.592040062 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.592210054 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.592242956 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.592242956 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.592309952 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.592351913 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.592380047 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.592437983 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.646254063 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.647032022 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.647114992 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.647615910 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.647634029 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.735145092 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.735604048 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.735685110 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.736231089 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.736251116 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.742679119 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.743108988 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.743185043 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.743626118 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.743640900 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.755743980 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.755757093 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.755938053 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.755939960 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.756011963 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.756068945 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.756103992 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.760601044 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.760648966 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.760785103 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.760907888 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.760909081 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.761002064 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.761002064 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.761044025 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.761075974 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.764198065 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.764250040 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.764327049 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.764514923 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.764528036 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.778846979 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.779282093 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.779329062 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.779843092 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.779854059 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.846724033 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.846926928 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.847008944 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.847235918 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.847270012 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.847295046 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.847310066 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.849883080 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.849915028 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.849999905 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.850229979 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.850239038 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.855417967 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.855564117 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.855634928 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.855674982 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.855674982 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.855695009 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.855707884 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.855921030 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.856316090 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.856338978 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.856657982 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.856662989 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.857943058 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.857961893 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.858057022 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.858227015 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.858237028 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.889885902 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.890048981 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.890155077 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.890209913 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.890228033 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.890249968 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.890259981 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.892934084 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.892971039 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.893040895 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.893461943 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.893480062 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.950263977 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.950279951 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.950330019 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.950375080 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.950443983 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:12.950479031 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.950505018 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:12.967655897 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.968158960 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.968312025 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.968312025 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.968354940 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.968372107 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.970923901 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.970963955 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:12.971127033 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.971355915 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:12.971368074 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.459916115 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.460941076 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.460973024 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.462172031 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.462179899 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.506118059 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.506546974 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.506578922 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.507288933 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.507297039 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.532139063 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.532594919 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.532629967 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.533055067 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.533061981 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.551178932 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.551548958 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.551584959 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.551961899 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.551968098 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.572943926 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.573079109 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.573194981 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.573342085 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.573359013 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.573369980 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.573375940 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.576066971 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.576152086 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.576445103 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.576558113 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.576586962 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.633285046 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.633451939 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.633516073 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.633708954 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.633708954 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.633728027 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.633739948 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.635821104 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.635905027 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.636019945 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.636157036 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.636195898 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.640000105 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.640139103 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.640211105 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.640352964 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.640362024 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.640378952 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.640384912 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.642632008 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.644942999 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.644973040 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.646332026 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.646338940 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.647994995 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.648036003 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.648123026 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.648225069 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.648245096 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.672513962 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.672677040 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.672744989 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.672826052 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.672837019 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.672869921 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.672877073 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.675054073 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.675132036 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.675359964 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.675559998 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.675592899 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.969532967 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969544888 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969604969 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.969707966 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969737053 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969744921 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.969748974 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.969760895 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969809055 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969827890 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969845057 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.969845057 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.969846010 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.969846964 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.969871998 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969909906 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969934940 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.969934940 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.969934940 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.970025063 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.970052004 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.970089912 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.970129013 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.970168114 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.970552921 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.970552921 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.970571995 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.970583916 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.970993996 CEST	49768	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.971024990 CEST	443	49768	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.971600056 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.971625090 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.971729994 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.972398996 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:13.972414017 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:13.976068974 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.976151943 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:13.976385117 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.976485014 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:13.976517916 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.236763954 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.237422943 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.237509012 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.238207102 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.238261938 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.286056042 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.287714005 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.287797928 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.288384914 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.288439989 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.332530022 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.332990885 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.333018064 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.333368063 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.333375931 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.346323013 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.346626043 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.346856117 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.346949100 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.346987963 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.347024918 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.347044945 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.350039005 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.350076914 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.350414038 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.352850914 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.352886915 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.359203100 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.359611034 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.359643936 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.360224962 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.360235929 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.393692970 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.394176006 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.394249916 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.394371033 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.394371986 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.394459009 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.394459009 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.394500017 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.394537926 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.399090052 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.399135113 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.399209976 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.399346113 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.399357080 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.446223974 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.446435928 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.446732998 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.446790934 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.446811914 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.446822882 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.446830988 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.449141979 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.449171066 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.449250937 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.449512959 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.449528933 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.472261906 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.472292900 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.472415924 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.472440004 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.472464085 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.472518921 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.472563982 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.472563982 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.472589970 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.472609997 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.476785898 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.476869106 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.477209091 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.477209091 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.477336884 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.567547083 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.567632914 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.567770004 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.567770004 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.568382025 CEST	49771	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.568445921 CEST	443	49771	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.568721056 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.568751097 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.568828106 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.569606066 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.569621086 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.572089911 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.572139978 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.572225094 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.572439909 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.572453976 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.592868090 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.592942953 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.592956066 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.593039989 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.593137980 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.593405962 CEST	49792	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.593416929 CEST	443	49792	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.593880892 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.593965054 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.594207048 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.594954014 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.595035076 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.596980095 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.597037077 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.597119093 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.597477913 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.597506046 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.638288975 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.638885975 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.638967037 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.639497995 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.639552116 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.666894913 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.666912079 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.666934013 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.667031050 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.667031050 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.667052984 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:14.667102098 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:14.747549057 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.747710943 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.747910023 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.747992039 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.748039007 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.748074055 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.748091936 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.752263069 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.752304077 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:14.752516031 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.752751112 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:14.752783060 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.011892080 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.012569904 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.012614965 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.013799906 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.013809919 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.064834118 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.065859079 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.065887928 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.066339016 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.066344976 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.105392933 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.105917931 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.105998039 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.106322050 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.106375933 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.119626999 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.120147943 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.120328903 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.120402098 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.120429993 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.120452881 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.120466948 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.123322010 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.123362064 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.123449087 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.123635054 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.123652935 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.143959999 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.144582033 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.144658089 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.144978046 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.145031929 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.186451912 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.186597109 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.186733961 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.186785936 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.186805964 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.186817884 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.186824083 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.190987110 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.191036940 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.191143036 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.191241026 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.191253901 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.211854935 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.212038040 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.212227106 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.212290049 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.212409973 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.212544918 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.212544918 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.212544918 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.212630033 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.214863062 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.214905977 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.215006113 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.215236902 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.215255976 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.255336046 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.255414009 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.255614996 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.255615950 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.255615950 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.257862091 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.257889986 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.258111954 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.258258104 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.258270025 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.435579062 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.436206102 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.436249018 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.436500072 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.436507940 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.453218937 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.453233957 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.453291893 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.453314066 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.453368902 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.522382021 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.522444010 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.555866957 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.556431055 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.556617022 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.556617022 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.556617022 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.556865931 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.556935072 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.559355974 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.559381962 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.559484959 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.559634924 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.559648037 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.634941101 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.686296940 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.686358929 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.686769009 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.686862946 CEST	443	49835	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.686986923 CEST	49835	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.687119961 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.687202930 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.687278986 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.688055038 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.688091040 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.689871073 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.689892054 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.689971924 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.690139055 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.690165043 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.723267078 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.723462105 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.723638058 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.724050999 CEST	49842	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.724073887 CEST	443	49842	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.724473953 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.724504948 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.724698067 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.724941015 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.724957943 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.727572918 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.727627993 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.727684021 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.727854967 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:15.727873087 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:15.828270912 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.829021931 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.829039097 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.829660892 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.829665899 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.845130920 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.845510006 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.845558882 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.845957041 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.845964909 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.862904072 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.862965107 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.916191101 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.916486979 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.916498899 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.916903973 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.916908026 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.936341047 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.936685085 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.936702967 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.937123060 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.937150002 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.937978029 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.938318014 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.938493967 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.938641071 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.938649893 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.938659906 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.938664913 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.941209078 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.941235065 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.941344023 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.941498995 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.941509008 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.953763962 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.953830004 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.953922033 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.953923941 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.954066038 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.954116106 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.954137087 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.954168081 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.954175949 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.955979109 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.955987930 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:15.956043959 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.956156015 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:15.956166029 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.024252892 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.024370909 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.024398088 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.024413109 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.024446011 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.024586916 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.024586916 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.024594069 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.024600983 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.026794910 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.026878119 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.026983023 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.027262926 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.027299881 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.051522970 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.051790953 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.051938057 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.051939011 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.051939011 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.054040909 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.054083109 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.054157972 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.054321051 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.054335117 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.221424103 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.221879959 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.221899033 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.222273111 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.222276926 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.330838919 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.331206083 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.331268072 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.331290960 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.331298113 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.331319094 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.331322908 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.333585024 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.333625078 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.333833933 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.333978891 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.333996058 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.359260082 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.359309912 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.457036018 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:16.502383947 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:16.624316931 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.624747992 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.624768019 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.625785112 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.625791073 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.640295029 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.640630960 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.640641928 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.641187906 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.641191006 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.677903891 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.678277969 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.678355932 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.678705931 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.678760052 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.729264975 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.729770899 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.729806900 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.730202913 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.730211020 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.733177900 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.733419895 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.733481884 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.733524084 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.733524084 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.733539104 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.733547926 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.736118078 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.736159086 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.736300945 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.736432076 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.736450911 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.754173040 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.755467892 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.755536079 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.755608082 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.755609035 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.755620956 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.755624056 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.757541895 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.757565975 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.757800102 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.757910013 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.757922888 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.789644957 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.789664030 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.789689064 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.789762020 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.789762020 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.789911985 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.789911985 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.789953947 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.789983034 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.791814089 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.791898966 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.792004108 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.792129993 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.792164087 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.825776100 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:16.826216936 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:16.826421976 CEST	443	49848	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:16.826479912 CEST	49848	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:16.837620020 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.837759018 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.837830067 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.837960005 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.837960005 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.837976933 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.837987900 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.840265989 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.840348959 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.840426922 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.840531111 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:16.840553999 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:16.950576067 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:16.950588942 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:16.950650930 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:16.950664997 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:16.950717926 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:16.999743938 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.000559092 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.000597954 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.000987053 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.000993967 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.038794041 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.039014101 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.039026022 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.039895058 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.040266037 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.040266037 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.040307999 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.040394068 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.067879915 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.068192005 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.068233013 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.069350958 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.069641113 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.069736004 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.069817066 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.079710007 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.079721928 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.113301039 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.113446951 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.113555908 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.113610983 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.113610983 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.113630056 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.113642931 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.115401030 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.116616964 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.116698027 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.116780043 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.116961956 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.116997004 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.126820087 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.180057049 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.180314064 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.180324078 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.180778980 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.181288958 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.181288958 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.181304932 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.181366920 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.235497952 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.650219917 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.650753975 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.650813103 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.651621103 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.651635885 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.651807070 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.652326107 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.652409077 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.652925014 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.652940035 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.654092073 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.654114008 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.654634953 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.654707909 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.655277014 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.655289888 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.655546904 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.655570984 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.656754017 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.656759024 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.759749889 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.759799957 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.759891987 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.760217905 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.760219097 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.760248899 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.760271072 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.763207912 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.763711929 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.763756037 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.763812065 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.763823032 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.763930082 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.763952017 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.763967991 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764153957 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764173031 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764226913 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764276981 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.764286041 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764336109 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764362097 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.764368057 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764374971 CEST	49899	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.764384985 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764386892 CEST	443	49899	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.764431953 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.764432907 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.764507055 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.764544010 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.768781900 CEST	49898	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.768821001 CEST	443	49898	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.772084951 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.772109985 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.772253036 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.773947954 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.773989916 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.774072886 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.774216890 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.774229050 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.774667978 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.774684906 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.776154995 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.776165009 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.776319027 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.776660919 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.776674986 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.828639030 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.844062090 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.845088005 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:17.847424984 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.847467899 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.848253965 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.848265886 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.875396967 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.899302959 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:17.953640938 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.953779936 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.953845024 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.958264112 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.958265066 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.958285093 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.958304882 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.982378006 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.982409954 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:17.982477903 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.982672930 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:17.982686043 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.316427946 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.316684008 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.316708088 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.320065975 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.320123911 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.320369959 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.320449114 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.320482016 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.326659918 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:18.326797962 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:18.326867104 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:18.365683079 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.365689993 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.369684935 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.369906902 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.369970083 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.371436119 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.371495962 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.371929884 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.372015953 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.372049093 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.413512945 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.413680077 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.413692951 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.413707972 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.414017916 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.414047956 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.414429903 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.414436102 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.426187992 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.426490068 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.426507950 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.426826000 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.426830053 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.430550098 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.430969954 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.431056976 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.431281090 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.431296110 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.433609009 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.433896065 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.433923960 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.434220076 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.434231043 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.461718082 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.521739960 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.522514105 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.522550106 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.522584915 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.522615910 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.522706985 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.522706985 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.522723913 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.522733927 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.524806023 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.524852037 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.524967909 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.525135040 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.525151014 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.535861969 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.535928011 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.535980940 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.536062002 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.536077023 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.536086082 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.536089897 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.537909031 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.537936926 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.537997007 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.538091898 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.538105011 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.538364887 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.538641930 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.538666010 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.538929939 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.539072037 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.539271116 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.539352894 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.539352894 CEST	49905	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.539395094 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.539423943 CEST	443	49905	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.540129900 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.540208101 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.540517092 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.540594101 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.540761948 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.540770054 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.541220903 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.541228056 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.541373968 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.541492939 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.541503906 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.542602062 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.542741060 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.542799950 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.542838097 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.542838097 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.542850971 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.542870045 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.544504881 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.544547081 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.544688940 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.544830084 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.544847012 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.571424007 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.571607113 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.571659088 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.573072910 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.573148966 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.573404074 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.573486090 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.573492050 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.589708090 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.612035990 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.612312078 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.612322092 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.613929033 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.613951921 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.615901947 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.615963936 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.616353989 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.616528034 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.616697073 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.616705894 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.641005039 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.641379118 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.641391993 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.641762972 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.641767025 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.660341978 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.660599947 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.748279095 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.748349905 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.748395920 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.748406887 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.748457909 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.748681068 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.748948097 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.748948097 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.748959064 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.748965025 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.753830910 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.753911972 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.754055023 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.754311085 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:18.754344940 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:18.924006939 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.924017906 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.924062014 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.924098015 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.924119949 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:18.924144030 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:18.924160957 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.119680882 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.147931099 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.171511889 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.191031933 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.191601038 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.191631079 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.192249060 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.192255974 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.193928957 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.194293022 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.194350958 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.195859909 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.196338892 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.196525097 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.196528912 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.199438095 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.199866056 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.199883938 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.200628996 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.200634956 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.202615023 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.219917059 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.220329046 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.220352888 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.220854998 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.220860004 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.239478111 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.239577055 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.240017891 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.240030050 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.240530968 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.240535021 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.250179052 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.300899982 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.301079035 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.301172018 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.301384926 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.301414013 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.301451921 CEST	49908	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.301465988 CEST	443	49908	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.304507971 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.304573059 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.304647923 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.304830074 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.304860115 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.309731007 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.309881926 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.309933901 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.309952021 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.309983969 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.310036898 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.310137033 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.310153961 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.310175896 CEST	49911	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.310193062 CEST	443	49911	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.313082933 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.313113928 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.313222885 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.313750982 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.313776970 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.330545902 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.330614090 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.330684900 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.330703020 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.330723047 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.330779076 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.331265926 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.331274033 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.331288099 CEST	49909	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.331293106 CEST	443	49909	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.334496975 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.334582090 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.334721088 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.334897995 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.334932089 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.359036922 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.359188080 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.359273911 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.359631062 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.359631062 CEST	49910	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.359642029 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.359651089 CEST	443	49910	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.363140106 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.363223076 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.363318920 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.363500118 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.363539934 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.369514942 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.411652088 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.412339926 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.412414074 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.413254023 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.413269997 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.421428919 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.522120953 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.522728920 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.522798061 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.522871017 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.522871971 CEST	49912	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.522912979 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.522941113 CEST	443	49912	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.524887085 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.524913073 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.524940968 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.524955988 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.524965048 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.524981022 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.524996042 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.525005102 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.525015116 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.525019884 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.525034904 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.525037050 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.525051117 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.525094032 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.525125980 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.525332928 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.525362968 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.567611933 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.613991976 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.614012957 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.614238024 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.614351988 CEST	443	49892	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.614588022 CEST	49892	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.742990017 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.743011951 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.743053913 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.743078947 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.743130922 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:19.743168116 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.743191957 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:19.925553083 CEST	49830	443	192.168.2.4	216.58.212.132
Oct 11, 2024 12:54:19.925615072 CEST	443	49830	216.58.212.132	192.168.2.4
Oct 11, 2024 12:54:19.954900026 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.955322981 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.955364943 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.955941916 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.955952883 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.982889891 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.983505011 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.983534098 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.984064102 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:19.984074116 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:19.993302107 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.016834974 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.018635035 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.018678904 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.019640923 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.019655943 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.028769970 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.029490948 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.029565096 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.030473948 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.030488968 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.046416044 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.046433926 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.047219992 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.047358990 CEST	443	49882	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.047444105 CEST	49882	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.066171885 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.068804979 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.068845034 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.068871975 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.068902016 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.069005013 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.069034100 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.069070101 CEST	49913	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.069084883 CEST	443	49913	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.073230028 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.073287010 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.073400974 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.073548079 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.073579073 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.092963934 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.093350887 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.093420029 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.093451977 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.093463898 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.093677044 CEST	49914	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.093688011 CEST	443	49914	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.097508907 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.097594023 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.097671986 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.097922087 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.097960949 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.123348951 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.123605013 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.123759031 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.123936892 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.123955965 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.123975992 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.123982906 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.131736040 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.131789923 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.132021904 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.132313013 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.132339954 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.140372992 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.140635967 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.140737057 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.140809059 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.140858889 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.140858889 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.140892982 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.140917063 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.145315886 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.145359039 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.145469904 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.145768881 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.145798922 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.164403915 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.164416075 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.164511919 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.164541960 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.164608002 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.188128948 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.191633940 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.191669941 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.192804098 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.192816019 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.308877945 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.309020042 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.309098005 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.309500933 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.309500933 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.309535027 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.309561968 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.320034027 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.320115089 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.320183039 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.321329117 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.321363926 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.730762005 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.731529951 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.731578112 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.732294083 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.732307911 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.751617908 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.753561020 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.753644943 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.753796101 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.753810883 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.801273108 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.801935911 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.801991940 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.802748919 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.802766085 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.810087919 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.810601950 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.810678005 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.811279058 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.811291933 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.839963913 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.840024948 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.840481997 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.840609074 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.840609074 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.840640068 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.840665102 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.844906092 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.844975948 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.845160007 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.845355988 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.845401049 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.860518932 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.860584974 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.860692978 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.860769987 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.860769987 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.860857010 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.860857010 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.860897064 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.860930920 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.863049030 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.863097906 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.863162994 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.863256931 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.863281965 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.866671085 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.866704941 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.866746902 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.866758108 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.866776943 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.866781950 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.866800070 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.866801977 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.866836071 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.866838932 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.866858959 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.866908073 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.866986990 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.867054939 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.867073059 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.867146969 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.867207050 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.867433071 CEST	49890	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:20.867446899 CEST	443	49890	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:20.914177895 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.914319038 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.914380074 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.914433956 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.914433956 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.914465904 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.914486885 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.916213989 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.916296005 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.916368008 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.916476965 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.916512966 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.919807911 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.919893026 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.919997931 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.920075893 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.920160055 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.920160055 CEST	49921	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.920200109 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.920227051 CEST	443	49921	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.921802998 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.921822071 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:20.921900034 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.922049999 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:20.922074080 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.006947041 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.007302999 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.007349968 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.007657051 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.007669926 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.119853973 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.119992971 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.120090008 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.120166063 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.120166063 CEST	49922	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.120208979 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.120237112 CEST	443	49922	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.121933937 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.121974945 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.122059107 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.122195005 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.122222900 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.287503958 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.287578106 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.287595987 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.287622929 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.287646055 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.287669897 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.288862944 CEST	49745	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.288881063 CEST	443	49745	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.289668083 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.289738894 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.289799929 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.290157080 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.290213108 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.325191975 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.325216055 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.325262070 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.325284958 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.325331926 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.325360060 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.325380087 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.518863916 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.519292116 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.519320011 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.519690037 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.519696951 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.523479939 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.523766994 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.523802996 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.524075031 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.524087906 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.578387976 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.578804970 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.578898907 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.579231024 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.579246044 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.582509995 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.582834005 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.582849979 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.583239079 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.583242893 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.636255980 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.636409044 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.636462927 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.636542082 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.636559963 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.636574984 CEST	49924	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.636580944 CEST	443	49924	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.638053894 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.638106108 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.638238907 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.638320923 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.638341904 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.638355017 CEST	49923	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.638361931 CEST	443	49923	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.639413118 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.639444113 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.639695883 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.639894009 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.639909983 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.640561104 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.640572071 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.640702963 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.641031981 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.641043901 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.686033964 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.686109066 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.686208010 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.686223030 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.686280966 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.686323881 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.686323881 CEST	49925	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.686367035 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.686393976 CEST	443	49925	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.688436985 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.688525915 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.688664913 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.688791037 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.688832998 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.693161964 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.693308115 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.693373919 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.693408966 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.693408966 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.693422079 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.693442106 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.695174932 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.695203066 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.695254087 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.695373058 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.695390940 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.770157099 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.770164967 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.770209074 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.770229101 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.770267010 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.770287991 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.770298004 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.770318031 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.770322084 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.770401955 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.770725012 CEST	49879	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.770731926 CEST	443	49879	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.771155119 CEST	49933	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.771194935 CEST	443	49933	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.771307945 CEST	49933	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.771553993 CEST	49933	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:21.771573067 CEST	443	49933	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:21.780220985 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.780513048 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.780535936 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.780956984 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.780962944 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.889540911 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.890197039 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.890250921 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.890263081 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.890290976 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.890377045 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.890420914 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.890431881 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.890443087 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.890448093 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.892936945 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.892981052 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:21.893142939 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.893228054 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:21.893246889 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.298826933 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.299252033 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.299276114 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.299734116 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.299741030 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.314316988 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.321312904 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.321672916 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.321681976 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.322119951 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.322124958 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.350455999 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.350761890 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.350783110 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.351094007 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.351098061 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.359241962 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.359251976 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.360512972 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.360641003 CEST	443	49873	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.360707045 CEST	49873	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.360822916 CEST	49935	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.360865116 CEST	443	49935	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.360941887 CEST	49935	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.361653090 CEST	49935	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.361670017 CEST	443	49935	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.386447906 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.386847019 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.386934996 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.387204885 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.387218952 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.408135891 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.408288002 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.408349037 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.408413887 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.408431053 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.408442974 CEST	49930	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.408449888 CEST	443	49930	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.410784960 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.410871029 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.410953045 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.411087036 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.411111116 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.436928034 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.437078953 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.437144995 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.437195063 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.437203884 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.437213898 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.437218904 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.440083027 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.440119028 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.440313101 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.440412998 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.440438986 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.459538937 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.459677935 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.459737062 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.459783077 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.459790945 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.459805012 CEST	49932	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.459809065 CEST	443	49932	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.461726904 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.461747885 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.461815119 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.461966038 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.461987972 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.499205112 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.499525070 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.499603987 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.499677896 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.499677896 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.499721050 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.499757051 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.504751921 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.504836082 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.505048990 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.505167007 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.505196095 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.573503971 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.573817015 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.573879004 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.574157000 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.574174881 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.645826101 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.645838022 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.645888090 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.645919085 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.645935059 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.645941973 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:22.645968914 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.645993948 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:22.694483995 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.694638968 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.694704056 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.694730997 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.694744110 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.694751978 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.694756985 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.696507931 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.696588039 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:22.696746111 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.696877003 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:22.696897030 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.109649897 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.110577106 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.110656977 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.110764980 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.111267090 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.111280918 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.111646891 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.111677885 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.112126112 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.112133026 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.162627935 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.163036108 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.163063049 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.164836884 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.164843082 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.181288958 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.182909966 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.182954073 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.183442116 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.183454990 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.224019051 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.224158049 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.224253893 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.224253893 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.224417925 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.224431992 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.225325108 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.225500107 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.227001905 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.227041006 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.227066994 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.227132082 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.227276087 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.227281094 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.227281094 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.227288008 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.227324963 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.227355003 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.229423046 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.229434013 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.229510069 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.229654074 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.229666948 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.277920961 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.277986050 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.278090954 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.278131962 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.278188944 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.278188944 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.278199911 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.278223038 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.278228998 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.280366898 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.280448914 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.280551910 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.280740976 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.280774117 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.290637016 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.290781975 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.290972948 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.290972948 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.292782068 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.292783022 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.292821884 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.292839050 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.293159008 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.293159008 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.293245077 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.369842052 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.370695114 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.370696068 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.370773077 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.370809078 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.443881035 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:23.443916082 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:23.443933964 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:23.443949938 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.444161892 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:23.444192886 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.444499016 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.444601059 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.444601059 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.444619894 CEST	443	49889	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:23.444854975 CEST	49889	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.444978952 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.445005894 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:23.445130110 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.445754051 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:23.445770025 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:23.480782986 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.480869055 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.480994940 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.481067896 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.481069088 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.481111050 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.481123924 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.483280897 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.483309031 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.483573914 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.483573914 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.483599901 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.882638931 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.883420944 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.883454084 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.885307074 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.885313034 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.888312101 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.888683081 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.888700962 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.889075994 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.889081001 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.962615013 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.962712049 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.962989092 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.963063002 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.963499069 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.963521957 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.963960886 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.964021921 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.964175940 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.964190006 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.991485119 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.991627932 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.991868019 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.991868019 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.991959095 CEST	49941	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.991974115 CEST	443	49941	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.994537115 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.994596004 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.994679928 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.995311022 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.995341063 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.997766018 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.997821093 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.997920990 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.997931004 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.998094082 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.998094082 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.998131037 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.998140097 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.998148918 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:23.998167992 CEST	49942	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:23.998172998 CEST	443	49942	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.000549078 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.000577927 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.003592014 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.003592014 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.003617048 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.074479103 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.074562073 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.074667931 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.074805975 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.074805975 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.074805975 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.074805975 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.075790882 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.075969934 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.076070070 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.076287985 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.077508926 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.077593088 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.077842951 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.081588030 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.081588984 CEST	49943	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.081653118 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.081685066 CEST	443	49943	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.084857941 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.084893942 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.085710049 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.085731983 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.085808039 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.085997105 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.086025000 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.099354029 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.099551916 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.099565983 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.099946976 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.104841948 CEST	49880	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.104931116 CEST	443	49880	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.115986109 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.120846987 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.120937109 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.121258020 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.125451088 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.125451088 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.125507116 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.165879965 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.168858051 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.176215887 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.176747084 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.176774025 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.177364111 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.177370071 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.220782995 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.291014910 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.291116953 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.291183949 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.291313887 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.291336060 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.291353941 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.291361094 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.293932915 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.293961048 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.294114113 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.294214964 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.294220924 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.382385969 CEST	49944	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.382448912 CEST	443	49944	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.888324976 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.888343096 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.888417006 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.888434887 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.888500929 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.888500929 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.888933897 CEST	49881	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.888972044 CEST	443	49881	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.889208078 CEST	49952	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.889252901 CEST	443	49952	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.889316082 CEST	49952	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.889374018 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.889863968 CEST	49952	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.889899015 CEST	443	49952	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.894148111 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.894376993 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.894409895 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.894988060 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.895405054 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.895416975 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.895862103 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.895925045 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.896162033 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.896167040 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.896224976 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.896308899 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.896363974 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.896373034 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:24.896913052 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.897243977 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.897313118 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.897757053 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:24.897769928 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:24.933021069 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:24.949103117 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:25.005337954 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.005682945 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.005757093 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.006215096 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.006227970 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.009495020 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.009597063 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.009735107 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.009793997 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.009891987 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.009891987 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.009907007 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.009921074 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.011440039 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.011483908 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.011502981 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.011538982 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.011594057 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.011625051 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.011647940 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.011662960 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.012496948 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.012551069 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.012623072 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.012835979 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.012862921 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.013993979 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.014012098 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.014151096 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.014285088 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.014293909 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.085510015 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.086113930 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.086126089 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.086328983 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.086332083 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.089684963 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.090104103 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.090189934 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.090500116 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.090516090 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.118240118 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.118299007 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.118413925 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.118484974 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.118485928 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.118572950 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.118573904 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.118613958 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.118645906 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.121191978 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.121218920 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.121359110 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.121721983 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.121738911 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.137830019 CEST	443	49935	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:25.186132908 CEST	49935	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:25.195215940 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.195254087 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.195314884 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.195349932 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.195349932 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.195667028 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.195667028 CEST	49951	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.195676088 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.195683956 CEST	443	49951	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.198359013 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.198400021 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.198455095 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.198707104 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.198734999 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.200627089 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.200649023 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.200684071 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.200704098 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.200767040 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.200895071 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.200937033 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.200965881 CEST	49950	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.200982094 CEST	443	49950	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.203052998 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.203074932 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.203133106 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.203304052 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.203315020 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.684514046 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.684961081 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.685031891 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.685575962 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.685589075 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.709309101 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.709722042 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.709798098 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.710052013 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.710064888 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.735064030 CEST	443	49945	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:25.787631035 CEST	49945	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:25.792735100 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.792771101 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.792900085 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.792977095 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.793193102 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.793196917 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.793215990 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.793236017 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.793265104 CEST	49953	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.793281078 CEST	443	49953	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.794394970 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.794401884 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.796804905 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.796838045 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.797077894 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.797245979 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.797260046 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.820645094 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.820780993 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.820849895 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.820966005 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.820993900 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.821018934 CEST	49954	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.821033001 CEST	443	49954	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.823852062 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.823942900 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.824042082 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.824212074 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.824254036 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.863701105 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.864056110 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.864088058 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.864578962 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.864589930 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.867690086 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.868036032 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.868053913 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.868339062 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.868344069 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.902172089 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.902321100 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.902448893 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.902564049 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.902564049 CEST	49955	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.902579069 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.902585983 CEST	443	49955	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.905420065 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.905458927 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.905530930 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.905683994 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.905698061 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.973618984 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.973973036 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.974014997 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.974021912 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.974072933 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.974127054 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.974133968 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.974143028 CEST	49956	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.974145889 CEST	443	49956	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.975797892 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.975996971 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.976089954 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.976248980 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.976248980 CEST	49957	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.976269007 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.976280928 CEST	443	49957	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.976546049 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.976612091 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.976804972 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.976890087 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.976910114 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.978996992 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.979038000 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:25.979110956 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.979245901 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:25.979274035 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:26.128670931 CEST	443	49933	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.169861078 CEST	49933	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.393064976 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.393096924 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.393191099 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.393191099 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.393234968 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.393270016 CEST	443	49891	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.393354893 CEST	49891	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.398248911 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.398261070 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.398308039 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.398315907 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.398350954 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.398370028 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.398406029 CEST	443	49928	103.90.234.120	192.168.2.4
Oct 11, 2024 12:54:26.398437977 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.398437977 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.398612976 CEST	49928	443	192.168.2.4	103.90.234.120
Oct 11, 2024 12:54:26.462989092 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:26.463975906 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:26.463975906 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:26.464014053 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:26.464027882 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:26.504919052 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:26.505387068 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:26.505460024 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 11, 2024 12:54:26.505768061 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 11, 2024 12:54:26.505781889 CEST	443	49959	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 12:53:03.292345047 CEST	53	64039	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:03.505040884 CEST	53	62846	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:04.486046076 CEST	53	55657	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:04.536185026 CEST	55259	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:04.538089991 CEST	62878	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:04.938750029 CEST	53	62878	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:05.166944027 CEST	53	55259	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:07.502068043 CEST	53419	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:07.502194881 CEST	58717	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:07.719559908 CEST	51194	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:07.719872952 CEST	54003	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:07.726535082 CEST	53	51194	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:07.727178097 CEST	53	54003	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:07.992038965 CEST	53	53419	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:08.314430952 CEST	53	58717	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:15.719537973 CEST	53	63402	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:21.474944115 CEST	138	138	192.168.2.4	192.168.2.255
Oct 11, 2024 12:53:21.476660013 CEST	53	59318	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:40.392690897 CEST	53	65480	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:48.319942951 CEST	58190	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:48.320158958 CEST	55020	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:48.335208893 CEST	53	58190	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:48.335918903 CEST	53	55020	1.1.1.1	192.168.2.4
Oct 11, 2024 12:53:48.336451054 CEST	54867	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:53:48.459037066 CEST	53	54867	1.1.1.1	192.168.2.4
Oct 11, 2024 12:54:03.138463020 CEST	53	59112	1.1.1.1	192.168.2.4
Oct 11, 2024 12:54:03.240000963 CEST	53	53140	1.1.1.1	192.168.2.4
Oct 11, 2024 12:54:08.549297094 CEST	53699	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:54:08.550046921 CEST	49573	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:54:09.176816940 CEST	53	49573	1.1.1.1	192.168.2.4
Oct 11, 2024 12:54:09.571010113 CEST	62989	53	192.168.2.4	1.1.1.1
Oct 11, 2024 12:54:09.907543898 CEST	53	53699	1.1.1.1	192.168.2.4
Oct 11, 2024 12:54:10.195230007 CEST	53	62989	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 11, 2024 12:53:08.315078974 CEST	192.168.2.4	1.1.1.1	c227	(Port unreachable)	Destination Unreachable
Oct 11, 2024 12:54:10.195296049 CEST	192.168.2.4	1.1.1.1	c1f5	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 11, 2024 12:53:04.536185026 CEST	192.168.2.4	1.1.1.1	0x3ed5	Standard query (0)	senacruises.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:04.538089991 CEST	192.168.2.4	1.1.1.1	0x5aa9	Standard query (0)	senacruises.com	65	IN (0x0001)	false
Oct 11, 2024 12:53:07.502068043 CEST	192.168.2.4	1.1.1.1	0x1475	Standard query (0)	senacruises.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:07.502194881 CEST	192.168.2.4	1.1.1.1	0x4b2b	Standard query (0)	senacruises.com	65	IN (0x0001)	false
Oct 11, 2024 12:53:07.719559908 CEST	192.168.2.4	1.1.1.1	0xa2b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:07.719872952 CEST	192.168.2.4	1.1.1.1	0x2753	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 11, 2024 12:53:48.319942951 CEST	192.168.2.4	1.1.1.1	0x7bcd	Standard query (0)	leevio.mthemes.org	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:48.320158958 CEST	192.168.2.4	1.1.1.1	0xf649	Standard query (0)	leevio.mthemes.org	65	IN (0x0001)	false
Oct 11, 2024 12:53:48.336451054 CEST	192.168.2.4	1.1.1.1	0xaa3f	Standard query (0)	leevio.mthemes.org	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:54:08.549297094 CEST	192.168.2.4	1.1.1.1	0xd7b5	Standard query (0)	senacruises.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:54:08.550046921 CEST	192.168.2.4	1.1.1.1	0x4fd3	Standard query (0)	senacruises.com	65	IN (0x0001)	false
Oct 11, 2024 12:54:09.571010113 CEST	192.168.2.4	1.1.1.1	0xd574	Standard query (0)	senacruises.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 11, 2024 12:53:05.166944027 CEST	1.1.1.1	192.168.2.4	0x3ed5	No error (0)	senacruises.com		103.90.234.120	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:07.726535082 CEST	1.1.1.1	192.168.2.4	0xa2b	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:07.727178097 CEST	1.1.1.1	192.168.2.4	0x2753	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 11, 2024 12:53:07.992038965 CEST	1.1.1.1	192.168.2.4	0x1475	No error (0)	senacruises.com		103.90.234.120	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:17.598439932 CEST	1.1.1.1	192.168.2.4	0xdaff	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:17.598439932 CEST	1.1.1.1	192.168.2.4	0xdaff	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:18.979170084 CEST	1.1.1.1	192.168.2.4	0xd27	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 12:53:18.979170084 CEST	1.1.1.1	192.168.2.4	0xd27	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:31.231842995 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 12:53:31.231842995 CEST	1.1.1.1	192.168.2.4	0xad4a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:48.335208893 CEST	1.1.1.1	192.168.2.4	0x7bcd	Name error (3)	leevio.mthemes.org	none	none	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:48.335918903 CEST	1.1.1.1	192.168.2.4	0xf649	Name error (3)	leevio.mthemes.org	none	none	65	IN (0x0001)	false
Oct 11, 2024 12:53:48.459037066 CEST	1.1.1.1	192.168.2.4	0xaa3f	Name error (3)	leevio.mthemes.org	none	none	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:53:58.315021992 CEST	1.1.1.1	192.168.2.4	0x1de2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 12:53:58.315021992 CEST	1.1.1.1	192.168.2.4	0x1de2	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 12:53:58.315021992 CEST	1.1.1.1	192.168.2.4	0x1de2	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:54:09.907543898 CEST	1.1.1.1	192.168.2.4	0xd7b5	No error (0)	senacruises.com		103.90.234.120	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:54:10.195230007 CEST	1.1.1.1	192.168.2.4	0xd574	No error (0)	senacruises.com		103.90.234.120	A (IP address)	IN (0x0001)	false
Oct 11, 2024 12:54:16.259277105 CEST	1.1.1.1	192.168.2.4	0x12e4	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 12:54:16.259277105 CEST	1.1.1.1	192.168.2.4	0x12e4	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

senacruises.com

https:

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	103.90.234.120	80	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 11, 2024 12:53:05.173084021 CEST	430	OUT	GET / HTTP/1.1 Host: senacruises.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 11, 2024 12:53:07.499017954 CEST	235	IN	HTTP/1.1 301 Moved Permanently content-type: text/html; charset=UTF-8 x-redirect-by: WordPress location: https://senacruises.com/ content-length: 0 date: Fri, 11 Oct 2024 10:53:08 GMT server: LiteSpeed connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	103.90.234.120	80	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 11, 2024 12:53:50.177517891 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	23.60.203.209	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 10:53:09 UTC	515	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=107590 Date: Fri, 11 Oct 2024 10:53:09 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	23.60.203.209	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 10:53:10 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=107590 Date: Fri, 11 Oct 2024 10:53:09 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-11 10:53:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:10 UTC	658	OUT	GET / HTTP/1.1 Host: senacruises.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:12 UTC	408	IN	HTTP/1.1 200 OK content-type: text/html; charset=UTF-8 link: <https://senacruises.com/wp-json/>; rel="https://api.w.org/" transfer-encoding: chunked date: Fri, 11 Oct 2024 10:53:13 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:12 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2024-10-11 10:53:14 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6e 6f 2d 73 76 67 22 3e 3c 68 65 61 64 3e 20 3c 73 63 72 69 70 74 20 64 61 74 61 2d 77 70 6d 65 74 65 6f 72 2d 6e 6f 6f 70 74 69 6d 69 7a 65 3d 22 74 72 75 65 22 20 3e 2f 2a 3c 21 5b 43 44 41 54 41 5b 2a 2f 76 61 72 20 5f 77 70 6d 65 74 65 6f 72 3d 7b 22 67 64 70 72 22 3a 74 72 75 65 2c 22 72 64 65 6c 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html lang="en-US" class="no-js no-svg"><head> <script data-wpmeteor-nooptimize="true" >/<![CDATA[/var _wpmeteor={"gdpr":true,"rdela
2024-10-11 10:53:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-11 10:53:14 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2024-10-11 10:53:14 UTC	8192	IN	Data Raw: 7c 5b 5d 29 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 4f 28 62 2c 74 29 7d 29 7d 3b 4f 28 62 2c 67 74 29 3b 68 2e 6f 6e 28 22 66 69 22 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 2e 62 69 6e 64 28 61 2c 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 66 69 22 29 29 29 3b 68 2e 6f 6e 28 22 66 69 22 2c 28 29 3d 3e 7b 55 65 3d 21 30 2c 41 3d 21 30 2c 79 74 28 29 2c 61 2e 72 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 6e 67 22 2c 45 28 4c 29 7d 29 3b 76 61 72 20 76 74 3d 28 29 3d 3e 7b 75 74 3d 21 30 2c 55 65 26 26 21 41 26 26 28 61 2e 72 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 6e 67 22 2c 45 28 4c 29 29 2c 61 65 28 6d 2c 76 74 29 7d 3b 4f 28 6d 2c 76 74 29 3b 5f 77 70 6d 65 74 65 6f 72 2e 72 64 65 6c 61 79 3e 3d 30 26 26 6e 65 77 20 50 28 29 Data Ascii: \|[]).forEach(t=>{O(b,t)})};O(b,gt);h.on("fi",a.dispatchEvent.bind(a,new CustomEvent("fi")));h.on("fi",()=>{Ue=!0,A=!0,yt(),a.readyState="loading",E(L)});var vt=()=>{ut=!0,Ue&&!A&&(a.readyState="loading",E(L)),ae(m,vt)};O(m,vt);_wpmeteor.rdelay>=0&&new P()
2024-10-11 10:53:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-11 10:53:14 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2024-10-11 10:53:15 UTC	8192	IN	Data Raw: 2f 62 6c 6f 63 6b 65 64 22 20 64 61 74 61 2d 77 70 6d 65 74 65 6f 72 2d 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 3e 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 0a 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 55 41 2d 31 36 30 34 31 38 38 31 32 2d 32 27 29 3b 3c 2f 73 63 72 69 70 74 3e 20 20 3c 73 63 72 69 70 74 20 20 64 61 74 61 2d 77 70 6d 65 74 65 6f 72 2d 61 66 74 65 72 3d 22 52 45 4f 52 44 45 52 22 20 74 79 70 65 3d 22 Data Ascii: /blocked" data-wpmeteor-type="text/javascript" >window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'UA-160418812-2');</script> <script data-wpmeteor-after="REORDER" type="
2024-10-11 10:53:15 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-11 10:53:15 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:18 UTC	582	OUT	GET /wp-content/themes/senacruises/css/js_composer.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:20 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:20 GMT etag: "70d52-60d5922c-284631;br" last-modified: Fri, 25 Jun 2021 08:22:04 GMT content-type: text/css content-length: 462162 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:20 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:23 UTC	16384	IN	Data Raw: 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 32 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 6f 6e 73 69 76 65 20 2e 76 63 5f 72 6f 77 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 2c 2e 76 63 5f 6e 6f 6e 5f 72 65 73 70 Data Ascii: .vc_non_responsive .vc_row .vc_col-sm-1,.vc_non_responsive .vc_row .vc_col-sm-10,.vc_non_responsive .vc_row .vc_col-sm-11,.vc_non_responsive .vc_row .vc_col-sm-12,.vc_non_responsive .vc_row .vc_col-sm-2,.vc_non_responsive .vc_row .vc_col-sm-3,.vc_non_resp
2024-10-11 10:53:28 UTC	16384	IN	Data Raw: 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 76 63 5f 69 63 6f 6e 73 2f 66 6f 6e 74 73 2f 56 43 2d 49 63 6f 6e 73 2e 77 6f 66 66 3f 6f 74 75 31 73 66 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 76 63 5f 69 63 6f 6e 73 2f 66 6f 6e 74 73 2f 56 43 2d 49 63 6f 6e 73 2e 73 76 67 3f 6f 74 75 31 73 66 23 56 43 2d 49 63 6f 6e 73 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 76 63 2d 63 6f 6d 70 6f 73 65 72 2d 69 63 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 43 2d 49 63 6f 6e 73 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e Data Ascii: t('truetype'),url(../fonts/vc_icons/fonts/VC-Icons.woff?otu1sf) format('woff'),url(../fonts/vc_icons/fonts/VC-Icons.svg?otu1sf#VC-Icons) format('svg');font-weight:400;font-style:normal}.vc-composer-icon{font-family:VC-Icons!important;font-style:normal;fon
2024-10-11 10:53:29 UTC	16384	IN	Data Raw: 69 6e 65 64 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 64 63 66 38 62 7d 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 33 64 2c 61 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 33 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 33 64 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 30 20 23 34 61 63 39 37 64 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 30 20 23 34 61 63 39 37 64 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: ined:hover,button.vc_btn-vista_blue.vc_btn_square_outlined:hover{border-color:#5dcf8b}.vc_btn-vista_blue.vc_btn_3d,a.vc_btn-vista_blue.vc_btn_3d,button.vc_btn-vista_blue.vc_btn_3d{-webkit-box-shadow:0 5px 0 #4ac97d;box-shadow:0 5px 0 #4ac97d;margin-bottom
2024-10-11 10:53:31 UTC	16384	IN	Data Raw: 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 20 2e 62 61 64 67 65 2c 61 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 20 2e 62 61 64 67 65 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 20 2e 62 61 64 67 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 64 37 64 37 64 7d 2e 76 63 5f 62 74 6e 2d 70 72 69 6d 61 72 79 2c 61 2e 76 63 5f 62 74 6e 2d 70 72 69 6d 61 72 79 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 70 72 69 Data Ascii: ieldset[disabled] button.vc_btn-default:hover{background-color:#fff;border-color:transparent}.vc_btn-default .badge,a.vc_btn-default .badge,button.vc_btn-default .badge{color:#fff;background-color:#7d7d7d}.vc_btn-primary,a.vc_btn-primary,button.vc_btn-pri
2024-10-11 10:53:33 UTC	16384	IN	Data Raw: 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 7d 23 63 6f 6e 74 65 6e 74 20 2e 77 70 62 5f 61 6c 65 72 74 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 23 63 6f 6e 74 65 6e 74 20 2e 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 20 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 23 63 6f 6e 74 65 6e 74 20 2e 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 3e 70 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 77 70 62 5f 61 6c 65 72 74 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 77 70 62 5f 74 65 78 74 5f 63 6f 6c 75 6d 6e 20 3a Data Ascii: mn_container{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox}#content .wpb_alert p:last-child,#content .wpb_text_column :last-child,#content .wpb_text_column p:last-child,.vc_message_box>p:last-child,.wpb_alert p:last-child,.wpb_text_column :
2024-10-11 10:53:37 UTC	16384	IN	Data Raw: 7d 2e 76 63 5f 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 73 6f 6c 69 64 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 37 38 37 37 7d 2e 76 63 5f 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 73 6f 6c 69 64 20 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 76 63 5f 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 6f 75 74 6c 69 6e 65 2c 2e 76 63 5f 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 2e 76 63 5f 6d 65 73 73 61 67 65 5f 62 6f 78 2d 73 6f 6c 69 64 2d 69 63 6f 6e 7b 63 6f Data Ascii: }.vc_color-danger.vc_message_box-solid{color:#fff;border-color:transparent;background-color:#ff7877}.vc_color-danger.vc_message_box-solid .vc_message_box-icon{color:#fff}.vc_color-danger.vc_message_box-outline,.vc_color-danger.vc_message_box-solid-icon{co
2024-10-11 10:53:39 UTC	16384	IN	Data Raw: 6c 65 3a 6e 6f 74 28 2e 76 63 5f 72 6f 77 2d 6f 2d 65 71 75 61 6c 2d 68 65 69 67 68 74 29 3e 2e 76 63 5f 76 63 5f 63 6f 6c 75 6d 6e 5f 69 6e 6e 65 72 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 5f 63 6f 6e 74 61 69 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 76 63 5f 65 6d 70 74 79 2d 65 6c 65 6d 65 6e 74 3e 2e 76 63 5f 63 6f 6c 75 6d 6e 2d 69 6e 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 70 78 7d 2e 66 62 5f 74 79 70 65 5f 73 74 61 6e 64 61 72 64 2c 2e 66 62 5f 74 79 70 65 5f 73 74 61 6e 64 61 72 64 20 69 66 Data Ascii: le:not(.vc_row-o-equal-height)>.vc_vc_column_inner>.vc_column_container{-webkit-box-align:center;-webkit-align-items:center;-ms-flex-align:center;align-items:center}.vc_empty-element>.vc_column-inner{min-height:100px}.fb_type_standard,.fb_type_standard if
2024-10-11 10:53:40 UTC	16384	IN	Data Raw: 75 6e 64 3a 23 30 30 39 31 39 63 7d 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 74 6f 67 67 6c 65 5f 64 65 66 61 75 6c 74 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 43 31 43 46 7d 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 74 6f 67 67 6c 65 5f 64 65 66 61 75 6c 74 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 74 69 74 6c 65 3a 68 6f 76 65 72 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 3a 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 39 31 39 63 7d 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 74 6f 67 67 6c 65 5f 61 72 72 6f 77 20 2e 76 63 Data Ascii: und:#00919c}.vc_toggle_color_turquoise.vc_toggle_default .vc_toggle_icon::after{background:#00C1CF}.vc_toggle_color_turquoise.vc_toggle_default .vc_toggle_title:hover .vc_toggle_icon::after{background:#00919c}.vc_toggle_color_turquoise.vc_toggle_arrow .vc
2024-10-11 10:53:43 UTC	16384	IN	Data Raw: 6c 65 64 5f 77 69 6e 65 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 69 6e 76 65 72 74 65 64 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 3a 3a 61 66 74 65 72 2c 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 6d 75 6c 6c 65 64 5f 77 69 6e 65 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 69 6e 76 65 72 74 65 64 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 30 34 38 35 42 7d 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 6d 75 6c 6c 65 64 5f 77 69 6e 65 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 74 69 74 6c 65 3a 68 6f 76 65 72 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 39 35 66 37 37 7d 2e 76 Data Ascii: led_wine.vc_toggle_color_inverted .vc_toggle_icon::after,.vc_toggle_color_mulled_wine.vc_toggle_color_inverted .vc_toggle_icon::before{background-color:#50485B}.vc_toggle_color_mulled_wine .vc_toggle_title:hover .vc_toggle_icon{background-color:#695f77}.v
2024-10-11 10:53:45 UTC	16384	IN	Data Raw: 79 2e 76 63 5f 74 6f 67 67 6c 65 5f 73 69 6d 70 6c 65 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 74 69 74 6c 65 3a 68 6f 76 65 72 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 2c 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 73 6b 79 2e 76 63 5f 74 6f 67 67 6c 65 5f 73 69 6d 70 6c 65 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 69 6e 76 65 72 74 65 64 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 3a 3a 61 66 74 65 72 2c 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 73 6b 79 2e 76 63 5f 74 6f 67 67 6c 65 5f 73 69 6d 70 6c 65 2e 76 63 5f 74 6f 67 67 6c 65 5f 63 6f 6c 6f 72 5f 69 6e 76 65 72 74 65 64 20 2e 76 63 5f 74 6f 67 67 6c 65 5f 69 63 6f 6e 3a 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 Data Ascii: y.vc_toggle_simple .vc_toggle_title:hover .vc_toggle_icon,.vc_toggle_color_sky.vc_toggle_simple.vc_toggle_color_inverted .vc_toggle_icon::after,.vc_toggle_color_sky.vc_toggle_simple.vc_toggle_color_inverted .vc_toggle_icon::before{background-color:transpa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:18 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_ed0f056da7742cb75dbe3dfcc6b1e99a.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:22 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:20 GMT etag: "9f3-65672f2a-34c51b;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 2547 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:20 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:26 UTC	2547	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 75 74 75 72 61 20 42 6f 6f 6b 22 3b 73 72 63 3a 75 72 6c 28 2f 2f 73 65 6e 61 63 72 75 69 73 65 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 73 65 6e 61 63 72 75 69 73 65 73 2f 63 73 73 2f 2e 2e 2f 66 6f 6e 74 73 2f 35 37 61 36 37 33 31 62 2d 66 61 35 63 2d 34 63 38 61 2d 62 65 61 38 2d 65 32 66 31 61 32 38 37 66 33 30 39 2e 65 6f 74 2d 23 69 65 66 69 78 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 73 65 6e 61 63 72 75 69 73 65 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 73 65 6e 61 63 72 75 69 73 65 73 2f 63 73 73 2f 2e 2e 2f 66 6f 6e 74 73 2f 35 37 61 36 37 33 31 62 2d 66 61 35 63 2d 34 63 38 61 2d 62 65 61 38 2d 65 32 66 31 61 32 38 Data Ascii: @font-face{font-family:"Futura Book";src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/57a6731b-fa5c-4c8a-bea8-e2f1a287f309.eot-#iefix);src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/57a6731b-fa5c-4c8a-bea8-e2f1a28

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:19 UTC	580	OUT	GET /wp-content/themes/senacruises/css/bootstrap.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:21 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:21 GMT etag: "1d78a-63fed15d-284627;;;" last-modified: Wed, 01 Mar 2023 04:15:25 GMT content-type: text/css content-length: 120714 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:21 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:27 UTC	16384	IN	Data Raw: 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 Data Ascii: html{-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}au
2024-10-11 10:53:32 UTC	16384	IN	Data Raw: 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 20 2e 73 6d 61 6c 6c 2c 2e 68 31 20 73 6d 61 6c 6c 2c 2e 68 32 20 2e 73 6d 61 6c 6c 2c 2e 68 32 20 73 6d 61 6c 6c 2c 2e 68 33 20 2e 73 6d 61 6c 6c 2c 2e 68 33 20 73 6d 61 6c 6c 2c 2e 68 34 20 2e 73 6d 61 6c 6c 2c 2e 68 34 20 73 6d 61 6c 6c 2c 2e 68 35 20 2e 73 6d 61 6c 6c 2c 2e 68 35 20 73 6d 61 6c 6c 2c 2e 68 36 20 2e 73 6d 61 6c 6c 2c 2e 68 36 20 73 6d 61 6c 6c 2c 68 31 20 2e 73 6d 61 6c 6c 2c 68 31 20 73 6d 61 6c 6c 2c 68 32 20 2e 73 6d 61 6c 6c 2c 68 32 20 73 6d 61 6c 6c 2c 68 33 20 2e 73 6d 61 6c 6c 2c 68 33 20 73 6d 61 6c 6c 2c 68 34 20 2e 73 6d Data Ascii: 6,h1,h2,h3,h4,h5,h6{font-weight:500;line-height:1.1;color:inherit}.h1 .small,.h1 small,.h2 .small,.h2 small,.h3 .small,.h3 small,.h4 .small,.h4 small,.h5 .small,.h5 small,.h6 .small,.h6 small,h1 .small,h1 small,h2 .small,h2 small,h3 .small,h3 small,h4 .sm
2024-10-11 10:53:33 UTC	16384	IN	Data Raw: 3e 74 68 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3a 68 6f 76 65 72 3e 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 2c 2e 74 61 62 6c 65 2d 68 6f 76 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 61 66 32 63 63 7d 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 64 61 6e 67 65 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 64 61 6e 67 65 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 64 61 6e 67 65 72 2c 2e 74 61 62 6c 65 3e Data Ascii: >th,.table-hover>tbody>tr:hover>.warning,.table-hover>tbody>tr>td.warning:hover,.table-hover>tbody>tr>th.warning:hover{background-color:#faf2cc}.table>tbody>tr.danger>td,.table>tbody>tr.danger>th,.table>tbody>tr>td.danger,.table>tbody>tr>th.danger,.table>
2024-10-11 10:53:35 UTC	16384	IN	Data Raw: 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 63 62 38 35 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 34 63 61 65 34 63 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 20 2e 62 61 64 67 65 7b 63 6f 6c 6f 72 3a 23 35 63 62 38 35 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: ess[disabled]:focus,.btn-success[disabled]:hover,fieldset[disabled] .btn-success.focus,fieldset[disabled] .btn-success:focus,fieldset[disabled] .btn-success:hover{background-color:#5cb85c;border-color:#4cae4c}.btn-success .badge{color:#5cb85c;background-c
2024-10-11 10:53:36 UTC	16384	IN	Data Raw: 73 74 69 66 69 65 64 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 7d 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 3e 2e 61 63 74 69 76 65 3e 61 2c 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 3e 2e 61 63 74 69 76 65 3e 61 3a 66 6f 63 75 73 2c 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 3e 2e 61 63 74 69 76 65 3e 61 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 6e Data Ascii: stified>li>a{margin-bottom:0}}.nav-tabs.nav-justified>li>a{margin-right:0;border-radius:4px}.nav-tabs.nav-justified>.active>a,.nav-tabs.nav-justified>.active>a:focus,.nav-tabs.nav-justified>.active>a:hover{border:1px solid #ddd}@media (min-width:768px){.n
2024-10-11 10:53:39 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 7d 2e 6a 75 6d 62 6f 74 72 6f 6e 20 2e 68 31 2c 2e 6a 75 6d 62 6f 74 72 6f 6e 20 68 31 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 6a 75 6d 62 6f 74 72 6f 6e 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 32 30 30 7d 2e 6a 75 6d 62 6f 74 72 6f 6e 3e 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 64 35 64 35 64 35 7d 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 6a 75 6d 62 6f 74 72 6f 6e 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 2e 6a 75 6d 62 6f 74 72 6f 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 62 Data Ascii: background-color:#eee}.jumbotron .h1,.jumbotron h1{color:inherit}.jumbotron p{margin-bottom:15px;font-size:21px;font-weight:200}.jumbotron>hr{border-top-color:#d5d5d5}.container .jumbotron,.container-fluid .jumbotron{padding-right:15px;padding-left:15px;b
2024-10-11 10:53:41 UTC	16384	IN	Data Raw: 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c Data Ascii: :last-child td:first-child,.panel>.table:last-child>tbody:last-child>tr:last-child th:first-child,.panel>.table:last-child>tfoot:last-child>tr:last-child td:first-child,.panel>.table:last-child>tfoot:last-child>tr:last-child th:first-child{border-bottom-l
2024-10-11 10:53:43 UTC	6026	IN	Data Raw: 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 6e 65 78 74 7b 72 69 67 68 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 30 70 78 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 6e 65 78 74 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 70 72 65 76 7b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 70 72 65 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: carousel-control .glyphicon-chevron-right,.carousel-control .icon-next{right:50%;margin-right:-10px}.carousel-control .icon-next,.carousel-control .icon-prev{width:20px;height:20px;font-family:serif;line-height:1}.carousel-control .icon-prev:before{conten

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:20 UTC	583	OUT	GET /wp-content/themes/senacruises/css/font-awesome.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:22 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:22 GMT etag: "713a-60d5922b-28462a;br" last-modified: Fri, 25 Jun 2021 08:22:03 GMT content-type: text/css content-length: 28986 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:22 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:27 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 36 2e 33 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 2e 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 2e 66 61 2c 2e 66 61 2d 73 74 61 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 66 61 2d 66 77 Data Ascii: /! Font Awesome 4.6.3 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */.fa.fa-pull-left,.fa.pull-left{margin-right:.3em}.fa,.fa-stack{display:inline-block}.fa-fw
2024-10-11 10:53:30 UTC	12602	IN	Data Raw: 61 2d 62 69 74 62 75 63 6b 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 31 22 7d 2e 66 61 2d 62 69 74 62 75 63 6b 65 74 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 32 22 7d 2e 66 61 2d 74 75 6d 62 6c 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 33 22 7d 2e 66 61 2d 74 75 6d 62 6c 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 34 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 35 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 36 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 6c 65 Data Ascii: a-bitbucket:before{content:"\f171"}.fa-bitbucket-square:before{content:"\f172"}.fa-tumblr:before{content:"\f173"}.fa-tumblr-square:before{content:"\f174"}.fa-long-arrow-down:before{content:"\f175"}.fa-long-arrow-up:before{content:"\f176"}.fa-long-arrow-le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:20 UTC	578	OUT	GET /wp-content/themes/senacruises/css/animate.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:23 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:23 GMT etag: "c91d-60d5922a-284625;br" last-modified: Fri, 25 Jun 2021 08:22:02 GMT content-type: text/css content-length: 51485 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:23 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:32 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 2e 61 6e 69 6d 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2014 Daniel Eden/.animated{-webkit-animation-duration:1s;animation-duration:1s;-webkit-animation-fill-mode:bo
2024-10-11 10:53:34 UTC	16384	IN	Data Raw: 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 30 30 70 78 2c 30 29 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 2e 66 61 64 65 49 6e 44 6f 77 6e 42 69 67 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 44 6f 77 6e 42 69 67 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 64 65 49 6e 44 6f 77 6e 42 69 67 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 4c 65 66 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 30 25 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 Data Ascii: slate3d(0,-2000px,0)}100%{opacity:1;-webkit-transform:none;transform:none}}.fadeInDownBig{-webkit-animation-name:fadeInDownBig;animation-name:fadeInDownBig}@-webkit-keyframes fadeInLeft{0%{opacity:0;-webkit-transform:translate3d(-100%,0,0);transform:trans
2024-10-11 10:53:40 UTC	16384	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 20 62 6f 74 74 6f 6d 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 20 62 6f 74 74 6f 6d 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 33 64 28 30 2c 30 2c 31 2c 2d 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 20 62 6f 74 74 6f 6d 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 72 69 67 68 74 20 62 6f 74 74 6f 6d 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e Data Ascii: kit-transform-origin:right bottom;transform-origin:right bottom;-webkit-transform:rotate3d(0,0,1,-90deg);transform:rotate3d(0,0,1,-90deg);opacity:0}100%{-webkit-transform-origin:right bottom;transform-origin:right bottom;-webkit-transform:none;transform:n
2024-10-11 10:53:40 UTC	2333	IN	Data Raw: 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 2e 73 6c 69 64 65 49 6e 52 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 52 69 67 68 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 52 69 67 68 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 49 6e 55 70 7b 30 25 7b Data Ascii: %{-webkit-transform:translateX(100%);transform:translateX(100%);visibility:visible}100%{-webkit-transform:translateX(0);transform:translateX(0)}}.slideInRight{-webkit-animation-name:slideInRight;animation-name:slideInRight}@-webkit-keyframes slideInUp{0%{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49756	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:30 UTC	579	OUT	GET /wp-content/themes/senacruises/css/flickity.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:35 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:32 GMT etag: "741-60d5922a-284629;br" last-modified: Fri, 25 Jun 2021 08:22:02 GMT content-type: text/css content-length: 1857 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:32 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:36 UTC	1857	IN	Data Raw: 2f 2a 21 20 46 6c 69 63 6b 69 74 79 20 76 32 2e 30 2e 35 0a 68 74 74 70 3a 2f 2f 66 6c 69 63 6b 69 74 79 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 66 6c 69 63 6b 69 74 79 2d 65 6e 61 62 6c 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 6c 69 63 6b 69 74 79 2d 65 6e 61 62 6c 65 64 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 66 6c 69 63 6b 69 74 79 2d 76 69 65 77 70 6f 72 74 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 66 6c 69 63 6b 69 74 79 2d 73 6c 69 64 65 72 7b 70 6f 73 69 Data Ascii: /! Flickity v2.0.5http://flickity.metafizzy.co---------------------------------------------- /.flickity-enabled{position:relative}.flickity-enabled:focus{outline:0}.flickity-viewport{overflow:hidden;position:relative;height:100%}.flickity-slider{posi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49757	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:35 UTC	594	OUT	GET /wp-content/themes/senacruises/css/jquery.mCustomScrollbar.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:36 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:37 GMT etag: "a757-60d5922b-284630;;;" last-modified: Fri, 25 Jun 2021 08:22:03 GMT content-type: text/css content-length: 42839 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:37 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:38 UTC	16384	IN	Data Raw: 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 69 6e 63 68 2d 7a 6f 6f 6d 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 69 6e 63 68 2d 7a 6f 6f 6d 7d 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 2e 6d 43 53 5f 6e 6f 5f 73 63 72 6f 6c 6c 62 61 72 2c 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 2e 6d 43 53 5f 74 6f 75 63 68 5f 61 63 74 69 6f 6e 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 7d 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 42 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 Data Ascii: .mCustomScrollbar{-ms-touch-action:pinch-zoom;touch-action:pinch-zoom}.mCustomScrollbar.mCS_no_scrollbar,.mCustomScrollbar.mCS_touch_action{-ms-touch-action:auto;touch-action:auto}.mCustomScrollBox{position:relative;overflow:hidden;height:100%;max-width:1
2024-10-11 10:53:41 UTC	16384	IN	Data Raw: 72 5f 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 35 29 7d 2e 6d 43 53 2d 64 61 72 6b 2d 74 68 69 6e 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 6f 6e 44 72 61 67 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 2c 2e 6d 43 53 2d 64 61 72 6b 2d 74 68 69 6e 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 3a 61 63 74 69 76 65 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: r_bar{background-color:#000;background-color:rgba(0,0,0,.85)}.mCS-dark-thin.mCSB_scrollTools .mCSB_dragger.mCSB_dragger_onDrag .mCSB_dragger_bar,.mCS-dark-thin.mCSB_scrollTools .mCSB_dragger:active .mCSB_dragger_bar{background-color:#000;background-color:
2024-10-11 10:53:42 UTC	10071	IN	Data Raw: 61 6c 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2c 2e 6d 43 53 2d 64 69 72 2d 72 74 6c 3e 2e 6d 43 53 42 5f 6f 75 74 73 69 64 65 2b 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 7b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2c 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 7b 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 Data Ascii: al-dark.mCSB_scrollTools_vertical,.mCS-dir-rtl>.mCSB_outside+.mCS-minimal.mCSB_scrollTools_vertical{left:0;right:auto}.mCS-minimal-dark.mCSB_scrollTools_vertical .mCSB_dragger,.mCS-minimal.mCSB_scrollTools_vertical .mCSB_dragger{height:50px}.mCS-minimal-d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49758	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:38 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_163e071a4b382db64f39f597edec18eb.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:39 UTC	500	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:40 GMT etag: "1555d-65672f2a-34c51c;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 87389 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:40 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:41 UTC	16384	IN	Data Raw: 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 36 37 7d 2e 68 34 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 6e 74 72 79 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 61 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 7d 61 3a 68 6f 76 65 72 2c 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 70 7b 6d 61 72 Data Ascii: body{font-size:16px;line-height:1.467}.h4-title a:hover{color:#000 !important}.entry-title a:hover{color:#000 !important}a{transition:all .2s;-webkit-transition:all .2s}a:hover,a:focus{outline:none;text-decoration:none}img{max-width:100%;height:auto}p{mar
2024-10-11 10:53:43 UTC	16384	IN	Data Raw: 69 6e 67 2d 74 6f 70 3a 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 6c 65 65 76 69 6f 2d 6d 61 70 73 2e 73 74 79 6c 65 2d 76 32 20 2e 73 6c 69 64 65 72 2d 66 6c 69 63 6b 69 74 79 2d 6d 61 69 6e 20 2e 65 6e 74 72 79 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 2e 6c 65 65 76 69 6f 2d 6d 61 70 73 2e 73 74 79 6c 65 2d 76 32 20 2e 73 6c 69 64 65 72 2d 66 6c 69 63 6b 69 74 79 2d 6e 61 76 20 2e 69 74 65 6d 2d 63 65 6c 6c 7b 77 69 64 74 68 3a 32 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 Data Ascii: ing-top:5px;line-height:20px}.leevio-maps.style-v2 .slider-flickity-main .entry-title{font-weight:400;font-size:inherit;margin-bottom:5px}.leevio-maps.style-v2 .slider-flickity-nav .item-cell{width:20%;line-height:55px;text-align:center;text-transform:upp
2024-10-11 10:53:45 UTC	16384	IN	Data Raw: 32 36 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 30 70 78 7d 2e 6c 65 65 76 69 6f 2d 6d 61 70 73 2e 6c 6f 63 61 6c 20 2e 6d 61 70 73 7b 68 65 69 67 68 74 3a 37 30 30 70 78 7d 2e 6d 61 70 73 20 2e 69 6e 66 6f 7b 77 69 64 74 68 3a 33 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 61 70 73 20 2e 69 6e 66 6f 2d 74 68 75 6d 62 6e 61 69 6c 7b 77 69 64 74 68 3a 31 30 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 33 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 Data Ascii: 265px;margin-right:30px}.leevio-maps.local .maps{height:700px}.maps .info{width:340px;padding:5px 0;float:left;font-size:14px;font-weight:400}.maps .info-thumbnail{width:100px;float:left;margin-right:13px;overflow:hidden;border-radius:4px;-webkit-border-r
2024-10-11 10:53:47 UTC	16384	IN	Data Raw: 64 75 63 74 2d 72 61 74 69 6e 67 20 2e 73 74 61 72 2d 72 61 74 69 6e 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 73 69 6e 67 6c 65 20 2e 70 72 6f 64 75 63 74 20 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 73 69 6e 67 6c 65 20 2e 70 72 6f 64 75 63 74 20 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 72 65 76 69 65 77 2d 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 7d 2e 73 69 6e 67 6c 65 20 2e 70 72 6f 64 75 63 74 20 2e 65 6e 74 72 79 2d 62 6f 64 79 20 2e 75 6c 2d 76 31 7b 66 6f 6e 74 2d 77 Data Ascii: duct-rating .star-rating{margin-top:0}.single .product .entry-header{margin-bottom:15px}.single .product .entry-header .woocommerce-review-link{display:inline-block;font-size:14px;font-style:italic;margin-top:2px}.single .product .entry-body .ul-v1{font-w
2024-10-11 10:53:49 UTC	16384	IN	Data Raw: 69 67 68 74 3a 34 34 70 78 3b 72 69 67 68 74 3a 32 30 70 78 7d 2e 61 72 63 68 69 76 65 2d 68 6f 74 65 6c 2e 73 74 79 6c 65 2d 76 33 20 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 6f 72 6d 20 69 6e 70 75 74 2c 2e 61 72 63 68 69 76 65 2d 68 6f 74 65 6c 2e 73 74 79 6c 65 2d 76 33 20 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 6f 72 6d 20 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 2e 61 72 63 68 69 76 65 2d 68 6f 74 65 6c 2e 73 74 79 6c 65 2d 76 33 20 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 2d 66 6f 72 6d 20 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 3e 73 70 61 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 35 70 78 7d 2e 70 61 63 6b 61 67 65 73 20 2e 72 6f 77 7b 6d 61 72 Data Ascii: ight:44px;right:20px}.archive-hotel.style-v3 .availability-form input,.archive-hotel.style-v3 .availability-form .select-wrapper select,.archive-hotel.style-v3 .availability-form .select-wrapper>span{padding-left:15px;padding-right:25px}.packages .row{mar
2024-10-11 10:53:50 UTC	5469	IN	Data Raw: 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 72 65 76 3a 68 6f 76 65 72 2c 2e 61 64 6d 69 6e 2d 63 6f 6c 6f 72 2d 73 75 6e 72 69 73 65 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6e 65 78 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 38 38 34 33 36 3b 63 6f 6c 6f 72 3a 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 71 75 61 6e 74 69 74 79 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f Data Ascii: .ui-datepicker-prev:hover,.admin-color-sunrise .ui-datepicker-next:hover{background:#e88436;color:#fff !important}.quantity{position:relative}input[type=number]::-webkit-inner-spin-button,input[type=number]::-webkit-outer-spin-button{-webkit-appearance:no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49759	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:40 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_d03a12b4df0c487814cfe0488d986ac8.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:42 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:42 GMT etag: "1fcd-65672f2a-34c51e;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 8141 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:42 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:46 UTC	8141	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6c 65 61 72 2d 63 6f 6c 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 73 6d 2d 36 5d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 6c 65 61 72 2d 63 6f 6c 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 73 6d 2d 34 5d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 6c 65 61 72 2d 63 6f 6c 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 73 6d 2d 33 5d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 34 6e 2b 31 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 63 6c 65 61 Data Ascii: @media screen and (min-width:768px){.clear-cols [class=col-sm-6]:nth-of-type(2n+1){clear:both}.clear-cols [class=col-sm-4]:nth-of-type(3n+1){clear:both}.clear-cols [class*=col-sm-3]:nth-of-type(4n+1){clear:both}}@media screen and (min-width:992px){.clea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49760	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:44 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_53bb9be00eefe2d488bac3248bef5ef9.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:45 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:46 GMT etag: "2ad3-65672f2a-34c51f;br" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 10963 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:46 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:48 UTC	10963	IN	Data Raw: 62 6f 64 79 2c 2e 72 6f 6f 6d 73 2d 76 36 20 2e 65 6e 74 72 79 2d 62 6f 64 79 20 2e 65 6e 74 72 79 2d 70 72 69 63 65 2c 2e 72 6f 6f 6d 73 2d 76 31 20 2e 65 6e 74 72 79 2d 62 6f 64 79 20 2e 65 6e 74 72 79 2d 70 72 69 63 65 2c 2e 63 6f 70 79 72 69 67 68 74 2c 2e 72 6f 6f 6d 73 2d 76 33 20 2e 65 6e 74 72 79 2d 70 72 69 63 65 20 2e 77 63 65 62 2d 70 72 69 63 65 2d 66 6f 72 6d 61 74 2c 2e 70 61 67 65 2d 62 72 65 61 64 63 72 75 6d 62 20 2e 65 6c 65 6d 65 6e 74 20 61 2c 2e 73 69 64 65 62 61 72 20 61 2c 2e 73 69 6e 67 6c 65 20 2e 70 72 6f 64 75 63 74 20 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 2e 70 72 69 63 65 20 2e 77 63 65 62 2d 70 72 69 63 65 2d 66 6f 72 6d 61 74 2c 2e 73 69 6e 67 6c 65 20 2e 70 72 6f 64 75 63 74 20 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 Data Ascii: body,.rooms-v6 .entry-body .entry-price,.rooms-v1 .entry-body .entry-price,.copyright,.rooms-v3 .entry-price .wceb-price-format,.page-breadcrumb .element a,.sidebar a,.single .product .entry-header .price .wceb-price-format,.single .product .entry-header

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49761	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:44 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_aac0a089fa823e89f7c13881d5461757.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:45 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:46 GMT etag: "1769-65672f2a-34c520;br" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 5993 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:46 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:49 UTC	5993	IN	Data Raw: 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 35 70 78 7d 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 77 70 2d 63 61 70 74 69 6f 6e 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 69 6e 67 6c 65 20 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 66 69 67 75 72 65 20 2e 77 70 2d 63 61 70 74 69 6f 6e 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 7d 2e 73 74 69 63 6b 79 20 2e 65 6e 74 72 79 2d 74 69 74 6c 65 7b 70 6f Data Ascii: .alignright{float:right;margin-left:15px}.alignleft{float:left;margin-right:15px}.aligncenter{display:block;margin-left:auto;margin-right:auto}.wp-caption{max-width:100%}.single .entry-content figure .wp-caption-text{margin-top:5px}.sticky .entry-title{po

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49762	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:46 UTC	579	OUT	GET /wp-content/themes/senacruises/css/addtoany.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:50 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:48 GMT etag: "590-60d5922a-284624;;;" last-modified: Fri, 25 Jun 2021 08:22:02 GMT content-type: text/css content-length: 1424 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:48 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:50 UTC	1424	IN	Data Raw: 2e 61 64 64 74 6f 61 6e 79 5f 73 68 61 72 65 5f 73 61 76 65 5f 63 6f 6e 74 61 69 6e 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 72 67 69 6e 3a 31 36 70 78 20 30 7d 2e 61 64 64 74 6f 61 6e 79 5f 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 36 70 78 7d 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 2c 2e 77 69 64 67 65 74 20 2e 61 64 64 74 6f 61 6e 79 5f 6c 69 73 74 20 61 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 3b 76 65 Data Ascii: .addtoany_share_save_container{clear:both;margin:16px 0}.addtoany_header{margin:0 0 16px}.addtoany_list{display:inline;line-height:16px}.addtoany_list a,.widget .addtoany_list a{border:0;box-shadow:none;display:inline-block;font-size:16px;padding:0 4px;ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:49 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_53616828522f5da2043c92164643fe0e.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:50 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:51 GMT etag: "1250-65672f2a-34c521;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 4688 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:51 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:52 UTC	4688	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 69 63 6f 6d 6f 6f 6e 27 3b 73 72 63 3a 75 72 6c 28 2f 2f 73 65 6e 61 63 72 75 69 73 65 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 73 65 6e 61 63 72 75 69 73 65 73 2f 63 73 73 2f 2e 2e 2f 66 6f 6e 74 73 2f 76 69 65 74 69 73 6f 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2f 2f 73 65 6e 61 63 72 75 69 73 65 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 73 65 6e 61 63 72 75 69 73 65 73 2f 63 73 73 2f 2e 2e 2f 66 6f 6e 74 73 2f 76 69 65 74 69 73 6f 2e 65 6f 74 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2f 2f 73 65 6e 61 63 72 75 69 73 65 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 Data Ascii: @font-face{font-family:'icomoon';src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/vietiso.eot);src:url(//senacruises.com/wp-content/themes/senacruises/css/../fonts/vietiso.eot) format('embedded-opentype'),url(//senacruises.com/wp-conte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49764	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:52 UTC	577	OUT	GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:53 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:54 GMT etag: "1b72b-66e07b2a-3224b6;;;" last-modified: Tue, 10 Sep 2024 17:00:26 GMT content-type: text/css content-length: 112427 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-10-11 10:54:00 UTC	16384	IN	Data Raw: 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 Data Ascii: ock-cover.has-background-dim.has-background-dim-90 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-90:not(.has-background-gradi
2024-10-11 10:54:02 UTC	16384	IN	Data Raw: 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 20 66 69 67 75 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 20 66 69 67 75 72 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6d 61 72 67 69 6e 3a 30 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 Data Ascii: -gallery:not(.has-nested-images) .blocks-gallery-image figure,.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item figure{align-items:flex-end;display:flex;height:100%;justify-content:flex-start;margin:0}.blocks-gallery-grid:not(.has-nested-imag
2024-10-11 10:54:04 UTC	16384	IN	Data Raw: 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 66 69 67 63 61 70 74 69 6f 6e 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 2e 69 73 2d 73 74 79 6c 65 2d 63 69 72 63 6c 65 2d 6d 61 73 6b 20 69 6d 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 7d 40 73 75 70 70 6f 72 74 73 20 28 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 20 6f 72 20 28 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 29 29 20 6f 72 20 28 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 6e 6f 6e 65 Data Ascii: er{margin-left:auto;margin-right:auto}.wp-block-image :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-image.is-style-circle-mask img{border-radius:9999px}@supports ((-webkit-mask-image:none) or (mask-image:none)) or (-webkit-mask-image:none
2024-10-11 10:54:06 UTC	16384	IN	Data Raw: 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 5f 5f 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 5f 5f 74 6f 67 67 6c 65 29 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 61 67 65 2d 6c 69 73 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6c 6f 73 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 Data Ascii: lock-navigation-item__content:not(.wp-block-navigation-submenu__toggle){padding:0}.wp-block-navigation .wp-block-page-list,.wp-block-navigation__container,.wp-block-navigation__responsive-close,.wp-block-navigation__responsive-container,.wp-block-navigati
2024-10-11 10:54:07 UTC	16384	IN	Data Raw: 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 7b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 5f 5f 6f 76 65 72 6c 61 79 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 3a 77 68 65 72 65 28 2e 61 6c 69 67 6e 6c 65 66 74 2c 2e 61 6c 69 67 6e 72 69 67 68 74 29 7b 77 69 64 74 68 3a 31 Data Ascii: eatured-image .wp-block-post-featured-image__overlay.has-background-dim-90{opacity:.9}.wp-block-post-featured-image .wp-block-post-featured-image__overlay.has-background-dim-100{opacity:1}.wp-block-post-featured-image:where(.alignleft,.alignright){width:1
2024-10-11 10:54:08 UTC	14123	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 23 31 64 61 31 66 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 69 6d 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 62 37 65 61 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 76 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 38 30 63 32 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a Data Ascii: d-color:#1da1f2;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vimeo{background-color:#1eb7ea;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-vk{background-color:#4680c2;color:#fff}:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49766	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:53 UTC	577	OUT	GET /wp-content/plugins/chaty/css/chaty-front.min.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:55 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:55 GMT etag: "618d-65672cb9-387f7a;br" last-modified: Wed, 29 Nov 2023 12:21:13 GMT content-type: text/css content-length: 24973 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:55 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:53:57 UTC	16384	IN	Data Raw: 2e 63 68 61 74 79 20 2a 2c 2e 63 68 61 74 79 2d 63 68 61 74 2d 76 69 65 77 20 2a 2c 2e 63 68 61 74 79 2d 6f 75 74 65 72 2d 66 6f 72 6d 73 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 63 68 61 74 79 2d 61 67 65 6e 74 2d 64 61 74 61 2c 2e 63 68 61 74 79 2d 77 68 61 74 73 61 70 70 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 63 68 61 74 79 2d 77 68 61 74 73 61 70 70 2d 6d 65 73 73 61 67 65 2c 2e 63 68 61 74 79 2d 77 68 61 74 73 61 70 70 2d 6d 65 73 73 61 67 65 20 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 65 67 6f 65 20 55 49 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 48 65 6c 76 65 74 69 63 61 2c 4c 75 63 69 64 61 20 47 72 61 6e 64 65 2c 41 72 69 61 6c 2c 55 62 75 6e 74 75 2c 43 61 6e 74 Data Ascii: .chaty ,.chaty-chat-view ,.chaty-outer-forms *{box-sizing:border-box}.chaty-agent-data,.chaty-whatsapp-field input[type=text],.chaty-whatsapp-message,.chaty-whatsapp-message p{font-family:Segoe UI,Helvetica Neue,Helvetica,Lucida Grande,Arial,Ubuntu,Cant
2024-10-11 10:53:58 UTC	8589	IN	Data Raw: 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 63 68 61 74 79 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 34 73 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 63 68 61 74 79 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 3a 61 66 74 65 72 2c 2e 63 68 61 74 79 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d Data Ascii: m:rotate(180deg)}.chaty-close-button{position:relative;width:16px;height:16px;transition:.4s;cursor:pointer}.chaty-close-button:after,.chaty-close-button:before{content:"";position:absolute;width:12px;height:2px;background-color:#fff;display:block;border-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:54 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda50636e9f233.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:53:55 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:56 GMT etag: "19bf-65672f2a-34c522;br" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 6591 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:01 UTC	6591	IN	Data Raw: 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 72 61 76 69 74 79 2d 74 68 65 6d 65 20 2e 67 66 69 65 6c 64 20 69 6e 70 75 74 2e 6c 61 72 67 65 2c 2e 67 66 6f 72 6d 5f 77 72 61 70 70 65 72 2e 67 72 61 76 69 74 79 2d 74 68 65 6d 65 20 2e 67 66 69 65 6c 64 20 73 65 6c 65 63 74 2e 6c 61 72 67 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 23 66 69 65 6c 64 5f 31 5f 36 2c 23 66 69 65 6c 64 5f 31 5f 35 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 69 6e 70 75 74 5f 31 5f 36 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 23 62 62 62 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 Data Ascii: .gform_wrapper.gravity-theme .gfield input.large,.gform_wrapper.gravity-theme .gfield select.large{width:100%;color:#000}#field_1_6,#field_1_5{float:left;width:100%}#input_1_6{border:solid 1px #bbb;height:50px;border-radius:3px}@media only screen and (max

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:57 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_ba71b7ff89e8a917a080977fa0451727.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:04 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:59 GMT etag: "f1f-65672f2a-34c523;br" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 3871 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:59 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:04 UTC	3871	IN	Data Raw: 5b 63 6c 61 73 73 5e 3d 77 70 2d 62 6c 6f 63 6b 2d 5d 3a 6e 6f 74 28 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 29 20 66 69 67 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 20 5b 63 6c 61 73 73 5e 3d 77 70 2d 62 6c 6f 63 6b 2d 5d 3a 6e 6f 74 28 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 29 20 66 69 67 63 61 70 74 69 6f 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 70 2e 68 61 73 2d 64 72 6f 70 2d 63 61 70 3a 6e 6f 74 28 3a 66 6f 63 75 73 29 3a 66 69 72 73 74 2d 6c 65 74 74 65 72 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 30 37 35 65 6d 7d Data Ascii: [class^=wp-block-]:not(.wp-block-gallery) figcaption{font-style:italic;margin-bottom:1.5em;text-align:left}.rtl [class^=wp-block-]:not(.wp-block-gallery) figcaption{text-align:right}p.has-drop-cap:not(:focus):first-letter {font-size:5em;margin-top:.075em}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49768	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:57 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_137587eed1343d99006b52fed3152293.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:00 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:53:59 GMT etag: "1c792-65672f2a-34c526;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 116626 accept-ranges: bytes date: Fri, 11 Oct 2024 10:53:59 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:05 UTC	16384	IN	Data Raw: 23 79 75 69 33 2d 63 73 73 2d 73 74 61 6d 70 2e 63 73 73 72 65 73 65 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 72 73 2d 63 61 72 6f 75 73 65 6c 2d 6d 61 73 6b 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 72 73 2d 63 61 72 6f 75 73 65 6c 2d 72 75 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 72 73 2d 63 61 72 6f 75 73 65 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 72 73 2d 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 72 73 2d 63 61 72 6f 75 73 65 6c 2d 6d 61 73 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 72 73 2d 63 61 72 6f 75 73 65 6c 2d 72 75 6e 6e 65 72 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 Data Ascii: #yui3-css-stamp.cssreset{display:none}.rs-carousel-mask{overflow:hidden}.rs-carousel-runner{position:relative;height:100%}.rs-carousel-horizontal .rs-carousel-item{float:left}.rs-carousel-mask{position:relative}.rs-carousel-runner{-moz-transform:translate
2024-10-11 10:54:07 UTC	16384	IN	Data Raw: 7d 2e 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 75 6d 6e 73 2d 34 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d 6e 73 2d 74 68 72 65 65 2d 71 75 61 72 74 65 72 73 7b 77 69 64 74 68 3a 33 30 38 70 78 7d 2e 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 75 6d 6e 73 2d 35 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d 6e 73 2d 71 75 61 72 74 65 72 7b 77 69 64 74 68 3a 31 31 39 70 78 7d 2e 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 75 6d 6e 73 2d 35 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d 6e 73 2d 74 68 69 72 64 7b 77 69 64 74 68 3a 31 36 34 70 78 7d 2e 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 75 6d 6e 73 2d 35 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d 6e 73 2d 68 61 6c 66 7b 77 69 64 74 68 3a 32 35 34 70 78 7d 2e 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 75 6d 6e 73 2d 35 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d Data Ascii: }.columns.columns-4>.column.columns-three-quarters{width:308px}.columns.columns-5>.column.columns-quarter{width:119px}.columns.columns-5>.column.columns-third{width:164px}.columns.columns-5>.column.columns-half{width:254px}.columns.columns-5>.column.colum
2024-10-11 10:54:09 UTC	16384	IN	Data Raw: 61 71 75 65 72 69 65 73 2e 6d 71 2d 31 34 34 30 70 78 20 2e 63 6f 6c 75 6d 6e 73 2d 31 32 7b 77 69 64 74 68 3a 31 34 34 30 70 78 7d 2e 6e 6f 2d 6d 65 64 69 61 71 75 65 72 69 65 73 2e 6d 71 2d 31 34 34 30 70 78 20 2e 63 6f 6c 75 6d 6e 73 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d 6e 73 2d 68 61 6c 66 7b 77 69 64 74 68 3a 33 37 70 78 7d 2e 6e 6f 2d 6d 65 64 69 61 71 75 65 72 69 65 73 2e 6d 71 2d 31 34 34 30 70 78 20 2e 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 75 6d 6e 73 2d 31 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d 6e 73 2d 71 75 61 72 74 65 72 7b 77 69 64 74 68 3a 36 2e 35 70 78 7d 2e 6e 6f 2d 6d 65 64 69 61 71 75 65 72 69 65 73 2e 6d 71 2d 31 34 34 30 70 78 20 2e 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 75 6d 6e 73 2d 31 3e 2e 63 6f 6c 75 6d 6e 2e 63 6f 6c 75 6d 6e 73 Data Ascii: aqueries.mq-1440px .columns-12{width:1440px}.no-mediaqueries.mq-1440px .columns>.column.columns-half{width:37px}.no-mediaqueries.mq-1440px .columns.columns-1>.column.columns-quarter{width:6.5px}.no-mediaqueries.mq-1440px .columns.columns-1>.column.columns
2024-10-11 10:54:10 UTC	16384	IN	Data Raw: 6f 72 6d 20 6c 61 62 65 6c 20 2e 6e 6f 74 65 7b 70 61 64 64 69 6e 67 3a 30 20 35 70 78 7d 2e 65 72 72 6f 72 20 2e 66 69 65 6c 64 2d 73 65 6c 65 63 74 2c 2e 65 72 72 6f 72 20 69 6e 70 75 74 2c 2e 65 72 72 6f 72 20 74 65 78 74 61 72 65 61 2c 69 6e 70 75 74 2e 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 63 35 30 32 30 32 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 23 63 35 30 32 30 32 7d 2e 6d 6f 64 61 6c 20 2e 65 72 72 6f 72 2c 6c 61 62 65 6c 2e 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 63 35 30 32 30 32 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 30 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 76 61 6c 69 64 61 74 69 6f 6e 2d 6d 65 73 73 61 67 65 2c 2e 76 61 6c 69 64 61 74 69 6f 6e 2d Data Ascii: orm label .note{padding:0 5px}.error .field-select,.error input,.error textarea,input.error{color:#c50202;border:solid 1px #c50202}.modal .error,label.error{color:#c50202!important;font-size:12px;padding:5px 0 0;clear:both}.validation-message,.validation-
2024-10-11 10:54:11 UTC	16384	IN	Data Raw: 35 71 5a 6d 4a 65 57 6c 5a 53 54 6b 70 47 51 6a 34 36 4e 6a 49 75 4b 69 59 69 48 68 6f 57 45 67 34 4b 42 67 48 39 2b 66 58 78 37 65 6e 6c 34 64 33 5a 31 64 48 4e 79 63 58 42 76 62 6d 31 73 61 32 70 70 61 47 64 6d 5a 57 52 6a 59 6d 46 67 58 31 35 64 58 46 74 61 57 56 68 58 56 6c 56 55 55 31 4a 52 55 45 39 4f 54 55 78 4c 53 6b 6c 49 52 30 5a 46 52 45 4e 43 51 55 41 2f 50 6a 30 38 4f 7a 6f 35 4f 44 63 32 4e 54 51 7a 4d 6a 45 77 4c 79 34 74 4c 43 73 71 4b 53 67 6e 4a 69 55 6b 49 79 49 68 49 42 38 65 48 52 77 62 47 68 6b 59 46 78 59 56 46 42 4d 53 45 52 41 50 44 67 30 4d 43 77 6f 4a 43 41 63 47 42 51 51 44 41 67 45 41 41 43 48 35 42 41 45 41 41 41 45 41 4c 41 41 41 41 41 41 46 41 41 63 41 41 41 49 4b 42 49 4a 68 71 5a 66 62 45 49 53 68 41 41 41 37 29 3b 77 69 Data Ascii: 5qZmJeWlZSTkpGQj46NjIuKiYiHhoWEg4KBgH9+fXx7enl4d3Z1dHNycXBvbm1sa2ppaGdmZWRjYmFgX15dXFtaWVhXVlVUU1JRUE9OTUxLSklIR0ZFRENCQUA/Pj08Ozo5ODc2NTQzMjEwLy4tLCsqKSgnJiUkIyIhIB8eHRwbGhkYFxYVFBMSERAPDg0MCwoJCAcGBQQDAgEAACH5BAEAAAEALAAAAAAFAAcAAAIKBIJhqZfbEIShAAA7);wi
2024-10-11 10:54:12 UTC	16384	IN	Data Raw: 2e 6d 69 64 64 6c 65 2c 2e 70 61 72 74 69 61 6c 2d 70 61 67 65 73 20 2e 70 61 67 65 73 2d 76 69 65 77 20 2e 64 65 74 61 69 6c 2e 77 69 74 68 2d 62 6f 72 64 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 2e 70 61 72 74 69 61 6c 2d 70 61 67 65 73 20 2e 70 61 67 65 73 2d 76 69 65 77 20 2e 64 65 74 61 69 6c 2e 77 69 74 68 2d 62 6f 72 64 65 72 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 70 61 72 74 69 61 6c 2d 70 61 67 65 73 20 2e 70 61 67 65 73 2d 76 69 65 77 20 2e 70 61 67 65 2d 63 6f 75 6e 74 7b 66 6c 6f Data Ascii: .middle,.partial-pages .pages-view .detail.with-border:before{content:'';display:inline-block;vertical-align:middle;white-space:normal}.partial-pages .pages-view .detail.with-border{white-space:nowrap;height:100%}.partial-pages .pages-view .page-count{flo
2024-10-11 10:54:13 UTC	16384	IN	Data Raw: 28 2d 34 35 64 65 67 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 7d 2e 76 6a 73 2d 64 65 66 61 75 6c 74 2d 73 6b 69 6e 20 2e 76 6a 73 2d 63 6f 6e 74 72 6f 6c 2d 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 68 65 69 67 68 74 3a 33 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 37 2c 34 30 2c 35 30 2c 2e 37 29 3b 66 6f 6e 74 2d 73 Data Ascii: (-45deg);filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=2)}.vjs-default-skin .vjs-control-bar{display:none;position:absolute;bottom:0;left:0;right:0;padding:0;margin:0;height:3em;background-color:#000;background-color:rgba(7,40,50,.7);font-s
2024-10-11 10:54:13 UTC	1938	IN	Data Raw: 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 76 6a 73 2d 6c 61 53 69 65 73 74 61 2d 73 6b 69 6e 20 2e 76 6a 73 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 20 75 6c 20 6c 69 2e 76 6a 73 2d 73 65 6c 65 63 74 65 64 3a 66 6f 63 75 73 2c 2e 76 6a 73 2d 6c 61 53 69 65 73 74 61 2d 73 6b 69 6e 20 2e 76 6a 73 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 20 75 6c 20 6c 69 2e 76 6a 73 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 2e 76 6a 73 2d 6c 61 53 69 65 73 74 61 2d 73 6b 69 6e 20 2e 76 6a 73 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 20 75 6c 20 6c 69 3a 66 6f 63 75 73 2c 2e 76 6a 73 2d 6c 61 53 69 65 73 74 61 2d 73 6b 69 6e 20 2e 76 6a 73 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 20 75 6c 20 6c 69 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 Data Ascii: -color:#000}.vjs-laSiesta-skin .vjs-menu-button ul li.vjs-selected:focus,.vjs-laSiesta-skin .vjs-menu-button ul li.vjs-selected:hover,.vjs-laSiesta-skin .vjs-menu-button ul li:focus,.vjs-laSiesta-skin .vjs-menu-button ul li:hover{background-color:#fff;bac

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49770	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:53:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:53:59 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:53:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 10 Oct 2024 22:59:49 GMT ETag: "0x8DCE97F3E383602" x-ms-request-id: c0577c57-401e-0015-067d-1b0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105358Z-1597f696844dq2z42yxqsye8f400000003h0000000004n0k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:53:59 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-11 10:53:59 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49776	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 415adc63-301e-0052-5ea3-1b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-r154656d9bccndzcn7g69nf4gw00000001rg00000000fq1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49773	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: d01aae37-c01e-007a-5dfb-19b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-1597f696844mgqk65a7x24zwr800000000y0000000009am7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49775	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e1b47659-601e-00ab-14a3-1b66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-1597f696844qt6drz6tdp68z0s00000000gg00000000ce92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49774	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38350f62-a01e-0021-1402-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-1597f696844lq27kahy39f1g98000000027g00000000awpk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49772	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: beffec96-b01e-0097-50a3-1b4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-r154656d9bccl8jh8cxn9cxxcs0000000nk0000000001vv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49779	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 999224e7-101e-0079-39d7-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-1597f6968447j5lf3znmew1ya000000001z0000000001t0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49778	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5d22ed5-201e-0071-72ac-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-r154656d9bcxgrn9bkxmc6s93s00000000r00000000060u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49777	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: b1e48aa2-701e-0053-2fa3-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-r154656d9bc6kzfwvnn9vvz3c40000000bf000000000ez3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49780	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: ce6c75d1-b01e-003e-3ead-1b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-1597f69684422wgj3u8kq0401g00000000wg000000006qbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49781	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:00 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:00 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: d99c8186-c01e-0066-1d32-1aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105400Z-1597f696844r6vmva1wkvnf04w000000012g00000000dfxh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:00 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49782	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:01 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105401Z-r154656d9bcc2bdtn1pd2qfd4c0000000y00000000004ku6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49783	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:01 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: e5b59701-201e-0071-31a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105401Z-1597f696844nchg575aqhm8m18000000015g000000009hqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49785	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:01 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 971898ab-401e-0048-3fac-1b0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105401Z-r154656d9bczmjpg03n78axyks00000000y00000000068nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49784	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:01 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 408dc6e4-801e-0078-5ca3-1bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105401Z-1597f696844tbmpv2gk8sfx5g000000003eg00000000011e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49786	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:01 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 38c0e901-901e-0016-3f33-1aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105401Z-1597f696844rxj9pg4nkdptn1w00000002dg000000003vyy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49787	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:02 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:02 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 797b9b47-101e-005a-1e2f-1a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105402Z-1597f696844tbmpv2gk8sfx5g000000003b0000000007eny x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49788	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:02 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: baf610b7-101e-008d-61b2-1b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105402Z-r154656d9bcc4snr2sy7ntt13c0000000hb00000000091sc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49790	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:02 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:02 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8abcb726-301e-001f-1b78-18aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105402Z-r154656d9bckpfgl7fe14swubc0000000nh00000000049ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:02 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49789	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:02 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:02 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: b287654a-001e-0017-109b-1b0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105402Z-r154656d9bc94jg685tuhe75qw0000000na000000000f7dn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:02 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49791	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:02 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 4ad26f23-901e-00ac-1503-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105402Z-1597f696844mcb4zga8fhwpnfg000000038g00000000cuf8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49797	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:03 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:03 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105403Z-r154656d9bcqqgssyv95384a1c0000000y3000000000008x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:03 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49794	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:03 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: ef4d5299-801e-00a0-0d77-1a2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105403Z-1597f696844mgqk65a7x24zwr800000000xg000000009nbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49793	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:03 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94af9378-501e-0047-4aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105403Z-1597f696844pvxrzyftm324kmw00000003fg000000002e1v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49795	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:03 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: bfebf80b-401e-0048-67a3-1b0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105403Z-r154656d9bc5qmxtyvgyzcay0c0000000ne0000000007hq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49796	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:03 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:03 UTC	498	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: bdf1ddaa-101e-0046-0383-1b91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105403Z-1597f696844br55nk2qss7hbqw00000003gg00000000abga x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-11 10:54:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49771	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:03 UTC	641	OUT	GET /wp-content/uploads/2019/07/Lan-ha-bay-with-sena-cruise-768x403.jpg HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:05 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:05 GMT etag: "11bb8-60d5932a-2e2bde;;;" last-modified: Fri, 25 Jun 2021 08:26:18 GMT content-type: image/jpeg content-length: 72632 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:05 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:08 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 93 03 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-10-11 10:54:10 UTC	16384	IN	Data Raw: 61 dc 12 3d ab cd 74 ed 2e 64 b5 65 45 5b 63 5a d6 55 93 46 8e 3b 9b 26 4b 91 72 8d 0c cf 9f 9a 3f e2 04 7a 64 8f d6 b1 af 6e 4c 32 18 63 42 b2 cd 21 c3 93 ce df 4f 6a 5b dd 4e e9 e5 78 c4 aa 55 73 97 1d 3d f1 50 5b da 4f 7d 79 0c 92 1d 8a 8a 1f a7 45 ff 00 13 5d 69 49 d9 48 b3 b2 f0 cd ea cb 29 d3 e4 b7 88 db dc b2 b0 fb 4a 6e 28 dd 08 19 e3 9c 83 cf a5 76 f2 b4 16 31 5d 69 76 b1 ac 26 04 20 6c 50 a3 04 f5 db f4 2a 7d 0e 4f 4a e0 e1 6b 1b 10 6d 96 eb 73 23 61 4b e1 1b 3d 40 ea 71 e9 d7 8a df b9 d4 9e 69 20 d4 1f 25 df 6a 48 b9 c1 20 af b7 e2 3f 4a ed a5 38 ca 3a 1c fb ad 0a 36 d3 5e d9 4b 0c 77 8e a2 20 0a ab e0 36 d0 31 90 3b fe 15 62 fb 6d ed ab a1 51 25 bc 6e 5d 10 f3 93 d3 f0 c8 c0 fc 05 67 ea 4b 34 eb ba de 4d e6 36 2e 41 20 0c 7a d5 39 91 ae 2d 58 Data Ascii: a=t.deE[cZUF;&Kr?zdnL2cB!Oj[NxUs=P[O}yE]iIH)Jn(v1]iv& lP*}OJkms#aK=@qi %jH ?J8:6^Kw 61;bmQ%n]gK4M6.A z9-X
2024-10-11 10:54:12 UTC	16384	IN	Data Raw: 08 87 87 c1 2b 2c d7 04 14 c6 7c a0 00 19 e7 00 13 83 ef 59 d7 b6 3a 4c ee d8 d5 e4 87 8c 02 d0 6e c8 f5 24 63 9a cd df 81 81 9f 4e 69 a6 17 90 6e eb 9e 29 3a 6d 75 2d 4d 76 36 34 db 05 6d 7a da 47 d4 ad f3 19 67 59 22 0c db 08 1c 75 c7 23 b7 be 2a fe 82 e2 59 f5 b6 65 f3 04 16 65 22 94 b6 d2 c1 51 c6 e6 04 f5 38 5e 7b 67 e9 58 90 dc 3e 9b 39 74 b3 17 0e c3 e4 0c 09 0a 4f 5e 3b 9f e4 79 ed 4d d2 f5 cb 3d 3e 3d 5a 29 9a 6b 66 d4 2d 8d bf cc 9e 60 27 3c 9f fe bd 61 3b f7 35 8f 72 de 9a d0 25 cc 33 4d 9c c1 2e 59 d0 8c 46 36 bf 07 d0 ee 51 fa d6 5b ea b2 e9 8f 32 d8 a3 f9 b2 9c 06 53 9c 06 20 fe 27 a7 1e dc d4 fa c5 c6 9f a8 45 09 17 00 cd b4 1f 2a 37 df bd 8b b1 24 9e c7 90 7b d5 3d 2f 4d bb 37 96 d3 98 f7 79 9f bb 8d 55 97 76 ee c7 3d be b4 3d 47 b1 b1 26 Data Ascii: +,\|Y:Ln$cNin):mu-Mv64mzGgY"u#Yee"Q8^{gX>9tO^;yM=>=Z)kf-`'<a;5r%3M.YF6Q[2S 'E7${=/M7yUv==G&
2024-10-11 10:54:13 UTC	16384	IN	Data Raw: 41 92 e3 70 47 cf 52 bb 1b 27 eb c0 fe 75 35 be 8d 13 b6 64 47 93 70 25 36 80 fc 76 f9 78 1e 9c 9c 8e 7a 9a ed 57 40 e0 98 ed a4 94 b0 1f 34 89 80 46 31 f7 73 fd 6a d4 7a 4a c1 18 86 58 a0 00 72 04 87 20 1e e7 68 2c 32 7f da 27 f3 a6 e6 8e 45 97 37 ba 3c d7 50 d1 4d a4 41 41 09 95 01 70 87 39 eb e8 7f 5c 66 b0 da c9 97 e4 90 1d c0 9c 71 f7 8e 79 5c 71 83 5e b5 aa e8 29 2d ba a2 c3 90 3e e1 8e 28 d3 9c 77 cf 3f ca b9 8b 8d 00 99 1e 59 fc 97 1b 86 15 ee 13 2a 01 ee 00 c6 7f 03 f8 d3 4d 33 8a be 02 51 7a 1c 5a d8 6d 8d 19 dc 2e e2 40 da 0f 03 be 49 c0 e3 f1 aa d3 5b b4 45 8e 41 03 f0 c7 d4 57 77 71 a6 47 70 77 47 38 dd 1a 8c 46 80 90 a4 03 d7 03 1d bd ab 9b d5 ec 84 70 f5 97 0a a0 92 f0 ed c1 3c 11 d7 8e 9e f4 5a e7 25 4a 2e 1b 98 81 85 2e ee 7a d2 32 00 4e Data Ascii: ApGR'u5dGp%6vxzW@4F1sjzJXr h,2'E7<PMAAp9\fqy\q^)->(w?Y*M3QzZm.@I[EAWwqGpwG8Fp<Z%J..z2N
2024-10-11 10:54:14 UTC	7096	IN	Data Raw: e9 04 33 c9 3c 4a 43 65 d7 69 f5 c6 39 a9 65 d4 c5 dc 8a 9b 55 23 03 b2 81 f9 f1 d6 bd 19 41 9e 33 83 dc ba fe 24 d4 9e dc c3 2c e3 ca 5c fc 98 dc 18 9e fc e7 9f 7a b9 69 2d bc f2 99 0c c6 1c 8c 12 40 7c f4 f4 39 27 af a5 60 c9 34 5b 5d 63 40 3a 0f 98 67 27 d8 f6 ab ba 7d a7 da 58 4a b1 c8 a3 1f 24 63 73 63 1d c7 e3 4a 50 56 ba d0 99 46 ca eb 43 5e ee ce 17 51 f6 45 89 23 42 46 f6 25 59 b3 d0 f1 c0 1d fb e2 b9 71 60 64 95 91 27 89 98 72 49 24 7e a4 0a ed ec 7c d8 f4 e5 11 32 a3 c7 b8 3e e8 09 2c 0f 6e 87 18 c9 ef 58 9a dc 97 71 79 77 0b 67 0a c6 fc e5 50 1c 8f 7e e3 f4 a8 a1 37 7e 50 a2 de c8 ca b5 43 16 55 1b 73 77 da 33 9e bc 8c d6 96 92 37 c9 70 ab 36 c9 98 65 50 b1 f9 cf 5e 4f 40 45 47 60 d6 f2 f9 7b dc ed 63 87 4c 67 03 b6 0e 79 35 15 d9 65 4d b6 60 Data Ascii: 3<JCei9eU#A3$,\zi-@\|9'`4[]c@:g'}XJ$cscJPVFC^QE#BF%Yq`d'rI$~\|2>,nXqywgP~7~PCUsw37p6eP^O@EG`{cLgy5eM`

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49802	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 6ec52d65-901e-0083-299c-1bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-1597f69684469lsz07pz1m8tt000000000ng00000000dqfx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49803	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 5e6d03be-001e-0014-0a36-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-r154656d9bc5gm9nqxzv5c87e80000000bgg000000004u9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49799	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: b009cb16-301e-0051-17aa-1b38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-r154656d9bczmjpg03n78axyks00000000v000000000c1ug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49801	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 8cee974c-001e-005a-2e33-1ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-1597f696844vxsn8mvt69yd90000000003b000000000d61g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49800	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: e44feb8c-a01e-0084-742d-169ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-r154656d9bc8glqfu2duqg0z1w00000007d000000000g84v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49806	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-1597f696844fbtvxvfb7m9xkb000000003m00000000055z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49807	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fd6931ea-f01e-005d-1dac-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-r154656d9bcqc2n2s48bp5ktg800000001hg00000000a5an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49804	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-1597f696844c8tlv61bxv37s7000000001qg00000000fhmk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49805	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dd141db6-901e-0029-7da3-1b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-1597f696844vxsn8mvt69yd90000000003f0000000004t1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49808	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fcff0b5c-f01e-005d-588a-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105404Z-r154656d9bcvhs4tvca1phhah400000000w0000000005rra x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:04 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49810	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:05 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 9570bf10-101e-007a-52ac-1b047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105405Z-r154656d9bcvhs4tvca1phhah400000000xg000000002s8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49812	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:05 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: feb590ad-c01e-002b-07cb-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105405Z-1597f696844gnxkv9xdcpvd3zn00000003g00000000068q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 10:54:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49814	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:05 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:05 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105405Z-r154656d9bc94jg685tuhe75qw0000000nag00000000e5wr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:05 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49811	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:05 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105405Z-r154656d9bcbnsv5vrs89mh8t4000000025g00000000dh0h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:05 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49813	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:05 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1853d52b-701e-0021-22a3-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105405Z-1597f696844rmb6h7netdh4d8400000003dg00000000btaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49792	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:06 UTC	620	OUT	GET /wp-content/themes/senacruises/images/logo.png HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:07 UTC	500	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:07 GMT etag: "4726-60d59231-284663;;;" last-modified: Fri, 25 Jun 2021 08:22:09 GMT content-type: image/png content-length: 18214 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:07 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:11 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 12 00 00 00 40 08 06 00 00 00 d6 06 f8 6b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR@ktEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-10-11 10:54:14 UTC	1830	IN	Data Raw: 80 29 62 08 ae b6 b4 86 a4 d1 46 9f f9 66 ae f7 50 b1 32 dd 26 4a db c9 94 64 dd 1b 8b 03 ef 31 dc 74 a3 6b 06 e5 07 94 cd 2d f9 e5 0c 56 2f a2 a9 89 52 0e cc 52 0c d7 8b 19 8e f4 33 91 fe 83 3f 33 c1 7a 5f f0 54 b8 ae a1 9a 22 e7 99 b8 12 eb a5 da 94 6b 7b c2 9a 50 0d eb a7 eb eb 3d 74 22 8d d4 71 fe 94 be f2 44 1e de 92 a1 29 2e c9 73 2a 29 a5 a4 4f 55 f9 04 14 36 4a 47 90 d3 3b 84 78 fe c9 f8 67 98 8c 78 86 70 10 28 19 65 48 c3 c4 6f d3 ba 6a 82 46 3e d4 79 8a 73 9c 6a 93 f9 d9 d1 d3 3c 26 2c 7e 51 88 66 a6 ac 72 3b 64 b2 15 1c 05 a1 92 15 1d f5 5d 20 bf 39 5b f4 05 ed b2 e2 ee 94 f6 44 04 3e 49 be db 98 01 d0 15 a7 7d ee b1 c9 d6 6d 32 8d 3d 22 1c ca 2c 69 d7 a4 c4 f2 64 26 7c d1 bc 93 36 63 32 4d de 33 ef e8 94 3c f9 ec 6a ad d6 08 20 1c cb 9f be 8f Data Ascii: )bFfP2&Jd1tk-V/RR3?3z_T"k{P=t"qD).s*)OU6JG;xgxp(eHojF>ysj<&,~Qfr;d] 9[D>I}m2=",id&\|6c2M3<j

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49815	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:06 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:06 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 4a48b82a-601e-003d-45a3-1b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105406Z-r154656d9bc2w2dvheyq24wgc400000001h000000000ee29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:06 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:06 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: ba19d68d-701e-0032-3e7e-18a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105406Z-r154656d9bc25bv85eq198756g00000001hg000000002tn9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:06 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:06 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: aa7a1e39-401e-0067-20a3-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105406Z-1597f696844pvxrzyftm324kmw000000039000000000g9kq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:06 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:06 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: dd14202a-901e-0029-4ca3-1b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105406Z-r154656d9bcqqgssyv95384a1c0000000y300000000000b7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 29a213d0-e01e-0033-71a3-1b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105406Z-1597f696844fbwfwqnpz61ymmg00000000x000000000dmu2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: fd486821-f01e-005d-2fa3-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-1597f696844rxj9pg4nkdptn1w00000002d00000000046nh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49821	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: fd486831-f01e-005d-3fa3-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-1597f696844mcb4zga8fhwpnfg000000038000000000dxt6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49823	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 01727dbb-701e-0032-7b9f-1ba540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-1597f696844zf5tbumkdu71prn00000003d000000000dbtn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49809	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	619	OUT	GET /wp-content/themes/senacruises/images/anh.jpg HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:08 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:09 GMT etag: "42f-60d5922f-28464a;;;" last-modified: Fri, 25 Jun 2021 08:22:07 GMT content-type: image/jpeg content-length: 1071 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:09 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:08 UTC	1071	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 14 00 1e 03 01 11 00 02 11 01 03 11 01 ff c4 00 92 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 01 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 04 05 03 01 02 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49822	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-r154656d9bcqc2n2s48bp5ktg800000001gg00000000dwcz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:07 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: f20d1edd-301e-003f-7acb-1b266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-1597f696844br55nk2qss7hbqw00000003hg000000007t8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 10:54:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 75281d68-101e-000b-5148-1a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-1597f696844rxj9pg4nkdptn1w00000002c0000000006p77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49825	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6dd9b2f2-501e-0035-4e87-1bc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-1597f696844vxsn8mvt69yd90000000003gg0000000009w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:07 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3e2df6d0-001e-0014-3aa3-1b5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105407Z-r154656d9bcqc2n2s48bp5ktg800000001kg000000008cpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49828	13.107.253.45	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:08 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 1772c903-a01e-001e-4f54-1a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105408Z-1597f696844t7g785amhdzxhqc00000003ag0000000088a2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:08 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105408Z-r154656d9bcq7mrvshhcb7rrsn000000028g000000000csq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:08 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:08 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105408Z-r154656d9bczmvnbrzm0xmzrs40000000nfg000000007g8z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:08 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:08 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: bef1da19-c01e-0034-1da3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105408Z-1597f696844l6hhwkgu2fa0dk000000000q0000000000229 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:08 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:08 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: f1a7bbb3-001e-00a2-248a-1bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105408Z-1597f696844mcb4zga8fhwpnfg00000003dg000000001r9n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:08 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105408Z-r154656d9bcvhs4tvca1phhah400000000yg000000000k04 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49836	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:08 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:08 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0e999b2a-201e-003f-411c-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105408Z-1597f696844mk866hfzabd6qfn00000001pg00000000a1qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:08 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49837	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:09 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105409Z-1597f696844gnxkv9xdcpvd3zn00000003h0000000004m76 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:09 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105409Z-1597f696844lq27kahy39f1g98000000026000000000cccz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:09 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0b82b7a4-c01e-008e-1ebf-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105409Z-r154656d9bc25bv85eq198756g00000001eg000000008cye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:09 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e1dbe94c-b01e-0021-72a4-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105409Z-r154656d9bc6kzfwvnn9vvz3c40000000bqg00000000023y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:09 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:09 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105409Z-r154656d9bcqqgssyv95384a1c0000000xwg00000000c7xu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:10 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 1871f2a9-701e-0021-15ac-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105410Z-r154656d9bc2w2dvheyq24wgc400000001pg00000000689r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:10 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:10 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105410Z-1597f696844qt6drz6tdp68z0s00000000qg00000000610f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:10 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:10 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105410Z-r154656d9bc9b22p5yc1zg6euw000000028g00000000cmt2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:10 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ae768298-401e-005b-2b04-1a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105410Z-1597f696844lt47xuv87mwabmw00000003gg00000000691a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:10 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 75b6adf0-e01e-0020-0d4d-1ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105410Z-1597f696844mgqk65a7x24zwr800000000z0000000007png x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49835	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	623	OUT	GET /wp-content/themes/senacruises/images/vietnam.jpg HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:15 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:13 GMT etag: "270-60d59232-284672;;;" last-modified: Fri, 25 Jun 2021 08:22:10 GMT content-type: image/jpeg content-length: 624 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:13 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:15 UTC	624	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 14 00 1e 03 01 11 00 02 11 01 03 11 01 ff c4 00 7b 00 00 02 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 05 06 07 01 00 01 05 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 02 04 Data Ascii: JFIFddDucky<Adobed{

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: ef53c767-f01e-0071-1df9-19431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-1597f696844qt6drz6tdp68z0s00000000qg00000000611b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1996b7fc-c01e-00a2-57a3-1b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-r154656d9bc2w2dvheyq24wgc400000001sg00000000092h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 124c4085-f01e-0096-13fa-1910ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-1597f696844nchg575aqhm8m1800000001600000000089ks x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:11 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4a48c519-601e-003d-1aa3-1b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-1597f696844dq2z42yxqsye8f400000003bg00000000e4ku x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:11 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49852	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: ecf9055d-301e-0020-4ea3-1b6299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-r154656d9bc94jg685tuhe75qw0000000nb000000000d4v5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49842	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	713	OUT	GET /wp-content/themes/senacruises/images/bg-header.png HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://senacruises.com/wp-content/cache/autoptimize/css/autoptimize_single_7f3badbcf14ad9398deda50636e9f233.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:15 UTC	495	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:13 GMT etag: "46-60d5922f-28464b;;;" last-modified: Fri, 25 Jun 2021 08:22:07 GMT content-type: image/png content-length: 70 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:13 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:15 UTC	70	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 98 09 00 00 9e 00 9a 61 a4 76 7f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATc```avIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-r154656d9bcghtlhf7uxqc3wnn00000001u000000000fgzy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:11 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3056715e-c01e-007a-0131-1ab877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-1597f696844d2h6g34xqfa1q1n000000021g00000000fz4f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:11 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 8a28721d-501e-008f-3e9c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105411Z-r154656d9bckpfgl7fe14swubc0000000nbg00000000edz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:12 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e5b5a791-201e-0071-25a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105412Z-1597f696844rxj9pg4nkdptn1w00000002d00000000046ss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49858	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:12 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 57c70db3-001e-0028-2cb0-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105412Z-r154656d9bcbnsv5vrs89mh8t40000000280000000006wm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49848	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:12 UTC	383	OUT	GET /wp-content/themes/senacruises/images/anh.jpg HTTP/1.1 Host: senacruises.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:16 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:14 GMT etag: "42f-60d5922f-28464a;;;" last-modified: Fri, 25 Jun 2021 08:22:07 GMT content-type: image/jpeg content-length: 1071 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:14 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:16 UTC	1071	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 00 14 00 1e 03 01 11 00 02 11 01 03 11 01 ff c4 00 92 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 01 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 04 05 03 01 02 Data Ascii: JFIFddDucky<Adobed

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:12 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:12 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 03cbdf3a-901e-00a0-7132-1a6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105412Z-1597f696844br55nk2qss7hbqw00000003n0000000002mdm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:12 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: fafdf676-a01e-006f-62a3-1b13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105412Z-r154656d9bcw8wfsu93rvvbgpc00000000yg000000009mav x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:12 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 383fd452-a01e-0021-4f05-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105412Z-1597f696844mgqk65a7x24zwr80000000110000000002py8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:12 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:12 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: c45e6f37-701e-003e-0e46-1979b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105412Z-r154656d9bczmjpg03n78axyks00000000zg000000003962 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: d071a7eb-c01e-002b-7f50-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105412Z-1597f69684422wgj3u8kq0401g00000000s000000000fyes x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:13 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:13 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: eccfae73-f01e-0003-4131-1a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105413Z-1597f696844fbtvxvfb7m9xkb000000003dg00000000fn2r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:13 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:13 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105413Z-r154656d9bc6kzfwvnn9vvz3c40000000bk0000000008x46 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:13 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:13 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 2117e38b-c01e-000b-3fac-1be255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105413Z-r154656d9bcw8wfsu93rvvbgpc00000000x000000000cmb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:13 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:13 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:13 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e5e2da3e-401e-0016-5c54-1a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105413Z-1597f696844tbmpv2gk8sfx5g000000003c0000000006fv5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:13 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105413Z-r154656d9bc5gm9nqxzv5c87e80000000bg00000000056w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:14 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:14 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: eb4d8ac2-801e-008f-2a87-1b2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105414Z-r154656d9bckpfgl7fe14swubc0000000nh0000000004ab5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:14 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:14 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:14 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b764448c-501e-008c-4097-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105414Z-1597f696844br55nk2qss7hbqw00000003mg00000000440n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:14 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:14 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:14 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: a2b1ec5b-001e-002b-54a3-1b99f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105414Z-r154656d9bcpx9trrv16tqwhac00000001r0000000009sm7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:14 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:14 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:14 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105414Z-r154656d9bcwd5vj3zknz7qfhc0000000d3000000000b065 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:14 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105414Z-1597f696844bcn2fz2c83qgev800000002yg00000000d3wz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c89f133c-401e-00a3-496d-1a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-1597f696844lq27kahy39f1g98000000024000000000gk8x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-r154656d9bc8ljwwac0k5w3kn800000004p0000000001rvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: aa7a2717-401e-0067-41a3-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-r154656d9bczmjpg03n78axyks00000000v000000000c271 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 408dd0a1-801e-0078-11a3-1bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-1597f696844r6vmva1wkvnf04w000000019g0000000005fw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5e44e277-701e-006f-7cd7-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-1597f6968449cxlldwc92t48ds000000036g00000000gxv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 780d477a-501e-007b-5ea3-1b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-r154656d9bckrjvwv99v3r8pqn00000000fg000000006p72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a267c0c0-701e-000d-3aa3-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-1597f696844nzckq75sv4z36ng0000000240000000005ppb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 03826138-301e-0033-0528-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-1597f696844l6hhwkgu2fa0dk000000000pg0000000014m6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 584bde60-501e-00a0-58ac-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105415Z-r154656d9bccndzcn7g69nf4gw00000001w0000000007aw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:16 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:16 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6e5eb744-701e-0098-3aa3-1b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105416Z-r154656d9bc8glqfu2duqg0z1w00000007fg00000000and1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 52a2c53c-c01e-0079-64ac-1be51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105416Z-1597f696844rmb6h7netdh4d8400000003k0000000001wdf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:16 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:16 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 15931ea1-d01e-0028-1da3-1b7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105416Z-r154656d9bcpx9trrv16tqwhac00000001r0000000009sq4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:16 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 609b4fe7-801e-007b-3997-1be7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105416Z-r154656d9bcbxn4qhpywdcmprs000000013g000000006nya x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49896	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 47bad248-d01e-0014-2e9c-1bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105416Z-1597f696844qt6drz6tdp68z0s00000000ng000000009qzg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49897	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 7ee78019-a01e-0002-6d9c-1b5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105416Z-r154656d9bcghtlhf7uxqc3wnn00000001x0000000009mwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49879	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_7a256a0a2702dd79a0133e9cb6b4b062.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:17 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:19 GMT etag: "3121-65672f2a-34c528;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 12577 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:19 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:21 UTC	12577	IN	Data Raw: 2e 68 6f 6d 65 5f 69 6e 64 65 78 20 73 65 63 74 69 6f 6e 7b 6d 61 72 67 69 6e 3a 34 30 70 78 20 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 68 6f 6d 65 5f 69 6e 64 65 78 20 73 65 63 74 69 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 3a 34 30 70 78 20 61 75 74 6f 20 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 7d 2e 68 6f 6d 65 5f 69 6e 64 65 78 20 2e 6f 66 66 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 36 66 36 66 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 34 30 70 78 20 30 3b 6d 61 72 67 69 6e 3a 31 32 70 78 20 30 20 30 7d 2e 68 6f 6d 65 5f 69 6e 64 65 78 20 2e 73 65 63 74 69 6f 6e 2d 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d Data Ascii: .home_index section{margin:40px auto;overflow:hidden}.home_index section:last-child{margin:40px auto 0;padding-bottom:40px}.home_index .off-color{background-color:#f6f6f6 !important;padding:40px 0;margin:12px 0 0}.home_index .section-center{margin:0 auto}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49880	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	405	OUT	GET /wp-content/uploads/2019/07/Lan-ha-bay-with-sena-cruise-768x403.jpg HTTP/1.1 Host: senacruises.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:17 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:19 GMT etag: "11bb8-60d5932a-2e2bde;;;" last-modified: Fri, 25 Jun 2021 08:26:18 GMT content-type: image/jpeg content-length: 72632 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:19 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:19 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 01 93 03 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$"
2024-10-11 10:54:19 UTC	16384	IN	Data Raw: 61 dc 12 3d ab cd 74 ed 2e 64 b5 65 45 5b 63 5a d6 55 93 46 8e 3b 9b 26 4b 91 72 8d 0c cf 9f 9a 3f e2 04 7a 64 8f d6 b1 af 6e 4c 32 18 63 42 b2 cd 21 c3 93 ce df 4f 6a 5b dd 4e e9 e5 78 c4 aa 55 73 97 1d 3d f1 50 5b da 4f 7d 79 0c 92 1d 8a 8a 1f a7 45 ff 00 13 5d 69 49 d9 48 b3 b2 f0 cd ea cb 29 d3 e4 b7 88 db dc b2 b0 fb 4a 6e 28 dd 08 19 e3 9c 83 cf a5 76 f2 b4 16 31 5d 69 76 b1 ac 26 04 20 6c 50 a3 04 f5 db f4 2a 7d 0e 4f 4a e0 e1 6b 1b 10 6d 96 eb 73 23 61 4b e1 1b 3d 40 ea 71 e9 d7 8a df b9 d4 9e 69 20 d4 1f 25 df 6a 48 b9 c1 20 af b7 e2 3f 4a ed a5 38 ca 3a 1c fb ad 0a 36 d3 5e d9 4b 0c 77 8e a2 20 0a ab e0 36 d0 31 90 3b fe 15 62 fb 6d ed ab a1 51 25 bc 6e 5d 10 f3 93 d3 f0 c8 c0 fc 05 67 ea 4b 34 eb ba de 4d e6 36 2e 41 20 0c 7a d5 39 91 ae 2d 58 Data Ascii: a=t.deE[cZUF;&Kr?zdnL2cB!Oj[NxUs=P[O}yE]iIH)Jn(v1]iv& lP*}OJkms#aK=@qi %jH ?J8:6^Kw 61;bmQ%n]gK4M6.A z9-X
2024-10-11 10:54:21 UTC	16384	IN	Data Raw: 08 87 87 c1 2b 2c d7 04 14 c6 7c a0 00 19 e7 00 13 83 ef 59 d7 b6 3a 4c ee d8 d5 e4 87 8c 02 d0 6e c8 f5 24 63 9a cd df 81 81 9f 4e 69 a6 17 90 6e eb 9e 29 3a 6d 75 2d 4d 76 36 34 db 05 6d 7a da 47 d4 ad f3 19 67 59 22 0c db 08 1c 75 c7 23 b7 be 2a fe 82 e2 59 f5 b6 65 f3 04 16 65 22 94 b6 d2 c1 51 c6 e6 04 f5 38 5e 7b 67 e9 58 90 dc 3e 9b 39 74 b3 17 0e c3 e4 0c 09 0a 4f 5e 3b 9f e4 79 ed 4d d2 f5 cb 3d 3e 3d 5a 29 9a 6b 66 d4 2d 8d bf cc 9e 60 27 3c 9f fe bd 61 3b f7 35 8f 72 de 9a d0 25 cc 33 4d 9c c1 2e 59 d0 8c 46 36 bf 07 d0 ee 51 fa d6 5b ea b2 e9 8f 32 d8 a3 f9 b2 9c 06 53 9c 06 20 fe 27 a7 1e dc d4 fa c5 c6 9f a8 45 09 17 00 cd b4 1f 2a 37 df bd 8b b1 24 9e c7 90 7b d5 3d 2f 4d bb 37 96 d3 98 f7 79 9f bb 8d 55 97 76 ee c7 3d be b4 3d 47 b1 b1 26 Data Ascii: +,\|Y:Ln$cNin):mu-Mv64mzGgY"u#Yee"Q8^{gX>9tO^;yM=>=Z)kf-`'<a;5r%3M.YF6Q[2S 'E7${=/M7yUv==G&
2024-10-11 10:54:22 UTC	16384	IN	Data Raw: 41 92 e3 70 47 cf 52 bb 1b 27 eb c0 fe 75 35 be 8d 13 b6 64 47 93 70 25 36 80 fc 76 f9 78 1e 9c 9c 8e 7a 9a ed 57 40 e0 98 ed a4 94 b0 1f 34 89 80 46 31 f7 73 fd 6a d4 7a 4a c1 18 86 58 a0 00 72 04 87 20 1e e7 68 2c 32 7f da 27 f3 a6 e6 8e 45 97 37 ba 3c d7 50 d1 4d a4 41 41 09 95 01 70 87 39 eb e8 7f 5c 66 b0 da c9 97 e4 90 1d c0 9c 71 f7 8e 79 5c 71 83 5e b5 aa e8 29 2d ba a2 c3 90 3e e1 8e 28 d3 9c 77 cf 3f ca b9 8b 8d 00 99 1e 59 fc 97 1b 86 15 ee 13 2a 01 ee 00 c6 7f 03 f8 d3 4d 33 8a be 02 51 7a 1c 5a d8 6d 8d 19 dc 2e e2 40 da 0f 03 be 49 c0 e3 f1 aa d3 5b b4 45 8e 41 03 f0 c7 d4 57 77 71 a6 47 70 77 47 38 dd 1a 8c 46 80 90 a4 03 d7 03 1d bd ab 9b d5 ec 84 70 f5 97 0a a0 92 f0 ed c1 3c 11 d7 8e 9e f4 5a e7 25 4a 2e 1b 98 81 85 2e ee 7a d2 32 00 4e Data Ascii: ApGR'u5dGp%6vxzW@4F1sjzJXr h,2'E7<PMAAp9\fqy\q^)->(w?Y*M3QzZm.@I[EAWwqGpwG8Fp<Z%J..z2N
2024-10-11 10:54:24 UTC	7096	IN	Data Raw: e9 04 33 c9 3c 4a 43 65 d7 69 f5 c6 39 a9 65 d4 c5 dc 8a 9b 55 23 03 b2 81 f9 f1 d6 bd 19 41 9e 33 83 dc ba fe 24 d4 9e dc c3 2c e3 ca 5c fc 98 dc 18 9e fc e7 9f 7a b9 69 2d bc f2 99 0c c6 1c 8c 12 40 7c f4 f4 39 27 af a5 60 c9 34 5b 5d 63 40 3a 0f 98 67 27 d8 f6 ab ba 7d a7 da 58 4a b1 c8 a3 1f 24 63 73 63 1d c7 e3 4a 50 56 ba d0 99 46 ca eb 43 5e ee ce 17 51 f6 45 89 23 42 46 f6 25 59 b3 d0 f1 c0 1d fb e2 b9 71 60 64 95 91 27 89 98 72 49 24 7e a4 0a ed ec 7c d8 f4 e5 11 32 a3 c7 b8 3e e8 09 2c 0f 6e 87 18 c9 ef 58 9a dc 97 71 79 77 0b 67 0a c6 fc e5 50 1c 8f 7e e3 f4 a8 a1 37 7e 50 a2 de c8 ca b5 43 16 55 1b 73 77 da 33 9e bc 8c d6 96 92 37 c9 70 ab 36 c9 98 65 50 b1 f9 cf 5e 4f 40 45 47 60 d6 f2 f9 7b dc ed 63 87 4c 67 03 b6 0e 79 35 15 d9 65 4d b6 60 Data Ascii: 3<JCei9eU#A3$,\zi-@\|9'`4[]c@:g'}XJ$cscJPVFC^QE#BF%Yq`d'rI$~\|2>,nXqywgP~7~PCUsw37p6eP^O@EG`{cLgy5eM`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49873	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_3bffff925615b95048e66876f674b80d.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:22 UTC	496	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:19 GMT etag: "22e-65672f2a-34c529;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 558 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:19 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:22 UTC	558	IN	Data Raw: 2e 68 69 64 65 2d 66 6f 72 2d 70 6f 72 74 72 61 69 74 7b 64 69 73 70 6c 61 79 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 2e 6d 65 64 69 61 2d 79 6f 75 74 75 62 65 2d 70 72 65 76 69 65 77 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 65 64 69 61 2d 79 6f 75 74 75 62 65 2d 70 72 65 76 69 65 77 20 2e 6d 65 64 69 61 2d 79 6f 75 74 75 62 65 2d 70 72 65 76 69 65 77 2d 6f 76 65 72 6c 61 79 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 30 70 78 3b 77 69 64 74 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 62 61 63 6b 67 72 6f Data Ascii: .hide-for-portrait{display:inherit!important;background:#000}.media-youtube-preview{position:relative}.media-youtube-preview .media-youtube-preview-overlay{cursor:pointer;position:absolute;top:50%;left:50%;border-radius:60px;width:60px;height:60px;backgro

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49900	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b346cf95-401e-0047-4db6-1b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105417Z-r154656d9bc8ljwwac0k5w3kn800000004m0000000005vts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49898	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 04eed431-801e-00a3-10a3-1b7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105417Z-r154656d9bcqqgssyv95384a1c0000000xwg00000000c85k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49901	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105417Z-1597f696844mgqk65a7x24zwr800000000yg000000007uu9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49899	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: d1a23a3b-201e-0085-4ca2-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105417Z-1597f696844fbwfwqnpz61ymmg00000000x000000000dn6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49902	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:17 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 5c81fd95-a01e-0070-2fb1-1b573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105417Z-1597f696844r6vmva1wkvnf04w0000000180000000003eqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49891	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:18 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_9ec5b7189112c03b14a7944f0fbcf8d0.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:19 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:20 GMT etag: "1679-65672f2a-34c52a;;;" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 5753 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:20 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:26 UTC	5753	IN	Data Raw: 61 2e 74 70 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 21 69 6d 70 Data Ascii: a.tp-button{background:0 0;font-family:inherit !important;height:auto !important;line-height:inherit !important;border-radius:0;-moz-border-radius:0px;-webkit-border-radius:0px;letter-spacing:0 !important;text-shadow:0 0 0 !important;box-shadow:0 0 0 !imp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49889	103.90.234.120	443	4428	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:18 UTC	617	OUT	GET /wp-content/cache/autoptimize/css/autoptimize_single_48828a05bf16f0e4de370da9028a4e16.css HTTP/1.1 Host: senacruises.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://senacruises.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 10:54:19 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Fri, 18 Oct 2024 10:54:20 GMT etag: "1c4e-65672f2a-3535b4;br" last-modified: Wed, 29 Nov 2023 12:31:38 GMT content-type: text/css content-length: 7246 accept-ranges: bytes date: Fri, 11 Oct 2024 10:54:20 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2024-10-11 10:54:23 UTC	7246	IN	Data Raw: 2e 69 64 65 61 5f 62 6f 78 2c 2e 75 69 2d 74 61 62 73 2c 2e 61 63 63 6f 72 64 69 6f 6e 20 2e 71 75 65 73 74 69 6f 6e 2c 2e 61 63 63 6f 72 64 69 6f 6e 20 2e 71 75 65 73 74 69 6f 6e 2e 61 63 74 69 76 65 20 2e 74 69 74 6c 65 2c 2e 61 63 63 6f 72 64 69 6f 6e 20 2e 71 75 65 73 74 69 6f 6e 20 2e 74 69 74 6c 65 3a 62 65 66 6f 72 65 2c 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 2c 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2c 2e 74 61 62 73 5f 76 65 72 74 69 63 61 6c 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 70 61 6e 65 6c 2c 74 61 62 6c 65 20 74 68 2c 74 61 62 6c 65 20 74 64 2c 2e 6c 69 73 74 5f 69 74 65 6d 20 2e 63 69 72 63 6c 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 69 6e 70 75 74 5b Data Ascii: .idea_box,.ui-tabs,.accordion .question,.accordion .question.active .title,.accordion .question .title:before,.ui-tabs .ui-tabs-nav,.ui-tabs .ui-tabs-nav li,.tabs_vertical.ui-tabs .ui-tabs-panel,table th,table td,.list_item .circle,input[type=date],input[

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49903	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:18 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: f6f11fce-501e-0029-52ad-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105418Z-r154656d9bc8ljwwac0k5w3kn800000004p0000000001s0x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 10:54:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49904	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 10:54:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 10:54:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 10:54:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 3f82ef55-601e-005c-0a97-1bf06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T105418Z-r154656d9bcxgrn9bkxmc6s93s00000000kg00000000f01z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 10:54:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6012, Parent PID: 5828

General

Target ID:	0
Start time:	06:52:58
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4428, Parent PID: 6012

General

Target ID:	2
Start time:	06:53:01
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1988,i,11577196584775358714,988303977893790033,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6276, Parent PID: 5828

General

Target ID:	3
Start time:	06:53:03
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://senacruises.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://senacruises.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Windows Analysis Report
http://senacruises.com